auth hash from params