Allow update for auth users