how to pass dynamic values in sql query in java