Add sha1 verification for downloads