Tighter security hash

The hash should uniquely identify a request.