fix: updates and saves in DAOs
chg: improve authorization
add: save user if missing