1.3.6 download links checksums dont match and not in released maven repo

[Jim Donofrio]

I tried downloading the 1.3.6 dist and src tar.gz's and the both files 
dont match up with the posted md5sum's?

Also, I noticed that the maven artifacts for 1.3.6 are still in a 
staging repository, you need to click close.