quote string variables, as per guidelines