added authentication for update