fix for issue 9 -- not escaping variable names