sanitize url and stuff