md5 checksum comparison for remote vs local

+ Fixes weak file comparison by comparing md5 checksums as a fallback
(to avoid expensive ops) after file size and lastModTime comparisons.
Hmm, see in the implementation of checksum, the hasher is resolved by matching it's enumerable value ie crypto.MD5, or crypto.SHA1.