Correctly handle parameterized find_by_sql selects

Parameterzied find_by_sql selects were erroring e.g:
User.find_by_sql(["select * from users where login = ?",'josh'])