Escape some more usernames and real names.

This change escapes a few more instances of usernames and real names which get
dumped into json code that gets executed.

Testing done: Ran unit tests.

Reviewed at https://reviews.reviewboard.org/r/5968/