Add escaping to column/parameter names

[benedeki]

Background

Columns and parameters can have letters other than [a-z_]. This can be handled by putting the names in double quotes.

Feature

Add quoting (") when injecting parameter/column names into the queries.
NB! consider escaping need if double quote is part of the column name (bad idea, but still)