always pass sequences of parameters to cursor.execute

Fixes #106

Previously some queries were passing bare strings to
cursor.execute(query, param). This worked under MySQLdb 1.2.3
but fails under MySQL 1.2.5.  This is likely broken on other
connectors which also expect a sequence of params.
Merge branch 'feature/gh#106_mysqldb_125_compatibility'