fixed bug that hashed 2x; now it's all in session.php and you don't have to worry about hashing