CSC: Multiple hash values can be passed as comma separated values, e.g. oauth2/authorize?hash=dnN3ZX.. .ZmRm,ZjIxM3… Z2Zk,…