escaping password strings before encryping/decryption