Download redirects per configurable URL prefix.

Closes #1
Secret key no longer used, or needed.