changed file POST syntax. added insecure file download DO NOT USE IN PRODUCTION