Python Mysql Parameterized Query