Escape sql in contact.getquick api CRM-12765
Remove escaping from ajax callback, it is now handled by api CRM-12765