update protected with autentication
more protection with authentication