More username escape fixes

commit b2f79db8 fixed the
"add_item" case but not the "update_item" case. This commit
addresses that.

http://bugzilla.gnome.org/show_bug.cgi?id=624847