Python Insert String Into Sql Query