upgrade the hash algorithm from SHA1 to SHA256; set the content length in HTTP responses