Sanitize user input