building your SQL outside CFQUERY gotcha