hash & cookies