added double quotes to some variables.

listening to "shellcheck.net"