save correct sha1 for a copied packaged

Signed-off-by: dmitriy kalinin <dmitriy@pivotallabs.com>
improved rebasing tests to all check sha1s in addition to fingerprint and version

Signed-off-by: dmitriy kalinin <dmitriy@pivotallabs.com>