[PATCH conductor 01/11] sanitize :sort_by param directly passed into the :order param of User:all