adding authentication to all update operations