Download permissions revisited in the Ability class.
Partial should now use `can? :download' instead of `can? :read' where appropriate.
Fixes #444.