move preparedstatement creatjion into dao.byId call