addded md5 checksum verification for the tarball download