Escape usernames in the header