ensure algorithm is sha1 according to pubsubhubbub spec

Signed-off-by: Joshua Rubin <jrubin@zvelo.com>