edit/update authorization