api/get allows file owner to view it if private

used in front end (also does not increase view count)