Sql server escape single quote dynamic sql