- improved authorization for users
- made password not required for method update