strip hash from user