Add some notes about SHA1 collisions