added SPA rpc-channel authentication
removed buffers and hex now that hashes arrive base64 encoded