Normalized escaping, escape $user->location just in case