auth loop update