better security for relay response

the md5 hash check can only for relay response because other options don't post back md5_hash field