add header with hash pass