Implement user create/update as prepared statement