changed sql parameter to named