add route to update_product