the security assist authenticate user behaviors that are on the page are set to redirect to the welcome.php page after loging in. That redirect occurs before the update can happen. remove the redirect from both of the security assist authenticate user behaviors to allow the update record behavior to trigger.