sanitize paths