sanitizing all strings