make all queries as PDO Prepared statements