MSSQL error: Incorrect syntax near the keyword 'AND'.