removed extra from auth hash