So, this is kinda overboard, but let's sanitize anything that isn't validated for the application_helper, namely the first_name, last_name, and username.