add update script and prevent non-ff pushes to master