update authorization