[PATCH conductor 02/13] sanatize :sort_by param directly passed into the :order param of User:all