change default hash function to sha1

If Git uses it, it's probably good enough.