extracting and running work now. all that's left is verifying the signature, and tested each code path.
added Erinn Clark's gpg, who signs the TBB tarballs -- more info https://www.torproject.org/docs/signing-keys.html.en
wrote a verify.sh script to verify signatures, moved files around some, and implemented verify function
got verification to work when sig is valid
starting to make progress bar show progress during non-download steps
finished pulsing the progressbar during verification and extracting
if verification fails, it can try the download over again
made it actually download from torproject.org instead of localhost
added icons to buttons