escape single quotes