Basic version of a secure download service

authenticates the request using a hmac signed URL [1] and hands off the
actual file download to nginx. Basic settings only, no nonce management
but adding that shouldn't be a problem from here.

[1] using https://github.com/Asquera/warden-hmac-authentication