DC21-509: fix so that files can be downloaded via the API with an authentication token