SQL parameterization added to refresh_users.