verify remote url before generating hash

dont hash error pages
check mime before hashing

do not accept anything else than application/zip
create mod folder on do_create if it does not exist