sanitizer up n running, xss proofed
auth on get and post added