added hashing of the auth header. not yet matching.