Fix bind_params off-by-one error

Sqlite3's parameter bindings are numbered from '1', not '0'.  This
allows `Cursor::bind_params` to be used.