post update and add a auth