Fix payload hash validation