forgot to update the auth object when user is created