Fix Update Statement for User, no longer overwrites all records.

* The update statement did not have a binding WHERE clause, which
  means it would overwrite every user with the updated values.