Update user policy