More username escape fixes

commit 7a6173d6 fixed the
"add_item" case but not the "update_item" case. This commit
addresses that.

http://bugzilla.gnome.org/show_bug.cgi?id=624847
(cherry picked from commit f9996fb5)