update makefile to use hash value when downloading