change where() to use IN statement