Escape hstore values in all query types

Hstore fields were only being handled in the `save` method, which isn't called in the `update`. Furthermore, the hstore conversion was being done in the *DAO*, which should be dialect-agnostic.

The hstore conversion was moved to the postgres-specific escape method. A possible improvement would be to refactor all dialect-specific conversions into their own method, such as *convert*.