escape app name before adding to DB