UPDATE users SET users.first_name = (?), users.last_name = (?), users.email = (?)
INNER JOIN api_tokens ON api_tokens.user_id=users.id WHERE api_tokens.token IN (?)
"Unsafe query: 'Update' statement without 'where' updates all table rows at once"