add test for update using id from token