updating with auth and forms