[PATCH conductor 2/7] sanatize :sort_by param directly passed into the :order param of User:all