updateuser secret for sandbox