escape things properly