fixed auth hash method