update user auth checks