search items expose an update function and rest calls pass along withCredentials