added Erinn Clark's gpg, who signs the TBB tarballs -- more info https://www.torproject.org/docs/signing-keys.html.en
wrote a verify.sh script to verify signatures, moved files around some, and implemented verify function