bump hash to sha512, add comment
Merge pull request #640 from twosigma/spot/security-review

bump hash to sha512, add comment