Using python variable in SQL query