Escape password to prevent '&' from terminating the command early

When passwords contain '&' char it will terminate the mysql statement early and fail to run the backfill.php