update user authentication API