Sanitize inputs (if Rails doesn't do this for us already)

[orenb]

e.g. the autocomplete inputs, we should whitelisting of characters to like.. .A-Za-z0-9 spaces comma to prevent possible sql injections.