how to use single quote in dynamic sql query