use prepared statements for insert

Signed-off-by: Arvid E. Picciani <aep@exys.org>
Merge pull request #2 from aep/master

use prepared statements for insert