use PreparedStatements only in places where we actually execute them more than once.