fix amahi-download requirement, it's digest now, not sha1