modify user authorize