escape username and password