using input params on mssql