updated downloads controller to work with permission model
added guest route for WS channel
typo
FIX: forbidden attributes got printed even if there were no
updated specs
got spec helper to work silent with capybara