sanitize organization ID before passing it in to query