update token method in users with sql