Removed escape_str from log-in query