Escaping username on update