sending user_hash for auth