escaping the brackets when a user is created