Added string escaping for password resets