user updates for api auth