adds 'download resume' link, puts some permissions business around both it and resume download view