ensureAuthenticated update