Wip/md5 checkum

adds the ability to checksum the downloaded sources (md5, sha256, ...)