API should make it easier to support other hash algorithms

currently, the hash is SHA1 and can't be changed. the algorithm should be exposed in the URL to facilitate supporting more than one in the future. ie, instead of just "12341234123341234...", it should be exposed as "sha1-123412342345321234..." so that future versions could transparently handle "md5-123412341243...", etc.
