store auth hash on user auth