modify authorization of put request