rename /api/hash to /api/identity
add 'type': 'email' to /api/identity endpoint for future-proofing.