make the file read that happens on every request async, and document the test that verifies mismatched checksums don't result in url re-writing