authentication & permission updates