escape backslashes in strings