update auth with passport