layouts controller update with bad auth token