escape string for postgre