Removed url-decode on checks + sanitized user input

Removed url-decode on checks + sanitized user input #13