put sha dep back in

looks like you accidentally removed sha.js when merging the commits