allow access origin, update user hash, set local timezones