escape @ in username and password