fix setting of prepared statement params