throw error if auth fails
actually parse hash fragment
bump version