updated prepare statement to take anonymous params