Make caching work

Don't delete the downloaded package, and include a SHA of the location
string in the downloaded file name.