add objectId to the returned auth hash