update top controller auth