escaping of character: ' in prepared statement values
Merge pull request #242 from p6spy/escape_sql_values

escaping of character: ' in prepared statement values; fixes #238