Make CMake path variables more robust

Add quotes around variables containing paths - this might require a second pass...

fixes #258