auth testing, hashing, loading from npmrc