upon managers creation - prevention of XSS and SQL injection