Actually step one works without all the sanitisation hassle.
Added some pry debugging stuff.