using auth_cred for user record update