auth paths update