added unit tests for checking sanitization, and enabled sanitization on all controller endpoints