Is `req.lang` safe, or does it need to be santized through i18n-abide or anything?