fix parameterized find_by_sql