user auth updt