fix security auditor tip that email login token could be hacked cause it used login_by_email_token LIKE :login_by_email_token not login_by_email_token=:login_by_email_token #remoteok