check sha-256 checkum of downloaded phantomjs

Since the files are downloaded over http, it seems prudent to check the sha256sum.

\- Felix