update authorise endpoint