bugfix where timestamp of auth_hash was not used to recalculate the signature