json: escape strings

Closes #24