properly escape quotes for post request data