Python Pass Variable To Sql Query