support download private file with downloadtoken