update authentication, authorization functions