db_escape_string: specify link parameter for consistency; sessions: do not force-close db connection in _close()