authhandler update