took favorites removal out of favorites.js and into utilities.js, passing clientHash now for authentication