Fix: escape username for Slor query