In order to support more than just MD5 verification, extract 'verify_download' into a separate method.