use global issue id (thread id) and actor-hash for user auth (ref #2)