Lock sanitize to major version 2

Done because v3 has dependencies that don’t work with jruby
Merge pull request #2 from lkemmerer/master

Lock sanitize to major version 2