Anonymous auth sessions now contain the hash.