Draft - Fix Headers sent + Start Downloads part

- Fix headers sent (content-type & auth)
- Add "checkPermission" to check access to part + auto-relog
- Add downloads_List() method