require authorization for all methods
bundle update