use the first hash as the verify key
Merge pull request #57 from humanmade/plugin-activate-fix

Plugin update fails to reactivate plugin