escape single quotes, to avoid javascript errors