be sure to stringify everything before hashing it
Ensure record_action's called on user creation.