Replace %HASH% in the newsletter with $hash/$login.