moved piece sha1 validation to before confirming the piece download.