Use dynamic queries to allow broader database use

A bug in the delete code was already fixed with #1744844: Argument 2 passed to db_query() must be an array null given, called in tokenauth.module on line 186.

Are you arguing that Tokenauth should use PDO code in general to achieve more database agnosticism? I've been waiting for practical use cases before taking on that performance overhead for what are relatively straightforward queries.