Disallow .msg files to be downloaded.

Shows a message from variable, if not allowed. Access Denied if var isnt set.
Merge branch 'hotfix-1.0.1-beta1'