check against user session object
shorthand (might need to revert for < PHP5.3?
correct query binding param count check