add sha256 checksum