add put method to AuthRequest and test for principal.update