quoting variables

Double quote to prevent globbing and word splitting ([more info](https://github.com/koalaman/shellcheck/wiki/SC2086)).