Update column list in SQL prepared statement.

The prepared statement for user creation needed to be updated to provide a value for `root_admin` (defaults to 0, since `root_admin` can not be null) and 'NULL' for `totp_secret`.