Properly escape literal values (so that a user with the first name 'Email' doesn't end up with his email address in the firstName column)