sanitizeToken

fun sanitizeToken(ffname: String): String

remove all characters that aren't in the allowed charaters list, to prevent any injection attacks on the LEAP scripts