use sanitize-html for email sanitization