always check file checksum and ensure that in-url hash matches file cont...

...ents. issue #31