updating user credentials without logging out in your app