downloader verifies checksum via ETag header, if present

Signed-off-by: Chris Adams <cadams@pivotallabs.com>