fix(quests): refunding scrolls. add .exec() to User.update() without callback