escape special characters in the password