modify users and auth