db: user: use buildSet to update user params
db: user: not to use deprecated escapeInteger/escapeString