properly quote strings