update for login and flash hash