fixes for download-zip:
- require login for zip-downloads (keep away spiders)
- return "not found" on if ids are no acs-objects
- clean temp-files on errors