update token authorization