swap MD5 & sha1 over to implementations from apache commons, fix shading of commons-codec