Using XML String as part of query in SQL Server