add shasum check (fixes #14)