update authorization requirements