Query bind parameters

[chorsley]

SQL queries in the aggregator must use bind parameters as best practice - please see http://initd.org/psycopg/docs/usage.html#the-problem-with-the-query-parameters. Data should be passed as an tuple arg to execute(), not interpolated in the string. This is already done for some queries, but not all.