Only allow download link to logged-in moderator