authenticate user before update user information