add charset to PDO creation (increased security)