auth.js - add calls to userutil.update