update users set totp_secret = ? where id is ?