Always sanitize slugs on post creation

Previously, there was no sanitization when a post was created via
the API, which could lead to bad data being stored, including HTML,
potentially enabling XSS attacks.