don't update account on authenticate