fixed bug: escape tabs from username