trying to get prepared statements to work