properly escape quotes