validate downloaded files with sha1 checksum.
recipe: reuse downloaded files when checksums match.