python sqlite3 query with variable