orm: Properly quote objects in queries

This fixes a regression in 4f8f236d, where
the parameters are sent in the SQL statement to the database. Objects which
are converted to a string must be propertly quoted when placed in the query.