support prepared statements with more than 32 parameters

Should fix #201 and #209