Fix usage of db_query_bound

Pass all parameters in as arguments in user_api.