Sanitize input on the server