user auth update