Update auth.xml