Use PreparedStatement For User Object Query