password needs escape if contains special character