escape password in mysql commands to avoid "syntax error near unexpected token "