install script: added missing quotes around variables

this makes the script fail if there is whitespace in a variable