update auth::authenticate