escape username field