added Boost; changed HSL Staff DB query to use prepared statement