updating with auth