removed authentication, added arg to accept hashkey