Fixed spelling typo for session:singleton()
Fixed escape() method on mysql database driver
Previously, escape() was wrapping the param in quotes which works well for SQL values, but not for SQL table and column names. For these, quotes break SQL syntax.

The new code uses regex replacement to handle ' " \n \r and \0, and the test cases have been updated to test for this new logic.