Check SHA before re-downloading

[nickorr]

Have the source script check the sha signatures before re-downloading and add a --force option to get it to delete and redownload regardless.