use of parameterized postgresql queries