added update to authorisation controller