use update_column instead of update_all

it's cleaner and also doesn't run hooks or validations