add sanitize function to ensure clean user input