now escapes underscores in db querys (for usernames)