update auth and user