moved auth hash content to root level to make it easyier to sign get requests