fix RosterItemProvider.getItems() for Oracle

see http://www.igniterealtime.org/community/thread/38452 - Oracle allows 1000 expressions in a prepared statement.
The code looks a little bit bogus as creating such a big PS makes usually little sense.
The thread contains three options how to fix this, either with an Array, with a sub-query or with a join.