change dafault controller
login permitted befor downloading a file, add more information on custom exceptions