updating authorization