Because I have to 'update' authorization (that's why I add the if (only_password === false) line , but I could do it on another function