escape usernames and emails locally