Escape single quote in sql strings:
When searching annotations, which contain single quotes, they are not proper
escaped, when called the Custom SQL-Function.

fixes #207