python sqlite3 select query with variable