how to pass variable in sql query in node js