Emails have moved to a separate table called user_emails (behind the scenes, users now can have multiple email addresses), so this command will have to be rewritten.
This may work:
UserEmail.update_all("email = replace(email, 'nonce', '')")
…or it might set fire to the database. 
You’ve been warned 