update auth for user expiracy