Don't escape values for toParam()

SQL client libraries like node-postgres expect to perform their own
escaping/formatting when given parameterized queries. Remove the format
call when doing toParam() so that query parameters are not
escaped/formatted twice.