Now can access any file private/public with authorization (previously scopes missing :P)