Some security issue fixes

• Replacing type case ints to get_sanitized_id due to the case that a user can use malicious input and security events are not logged
• Also, fixing the get_organization_metrics endpoint access control. A user having only leadership access should not be able to see the organization metrics for any organization.