escape quotes just in case