make tomcat url and checksum overridable