fixes #14: if 304 and shasum matched, skip donwloading packages