attempt fix db_escape_string() invocation in sessions.php