make the update schema endpoint secure