duplicate characters in a string