Use prepared statements for updates

Less parsing yay!