updated some user authorization