escaping quotes and adding quotes to params