moved checksum from md5 to sha1