username string escaped