changes to auth_hash