updated MD5 and location of source tarball