Add support for parameterized sql() objects

closes #3