add testing of IN clause
refactor to use params object
add parameterization usage in every query
fix handling for IN and NOT IN empty arrays