update accessControl for new auth collection