If we not hash the request data, than attacker could intercept the token and just change the request data.
If we not hash the request data, than attacker could intercept the token and just change the request data.