fix auth cb to send hash