update auth statements to UPDATES