fix download url and hash