make sha256 the default (instead of sha1)