handle public vs. private ressource in sendFile()