Fix filename to avoid appending authenticated url params