update token authentication