add notes about checksum to readme