working on hashing base and client auth tokens