escape csv stuffs better