sanitize params