add digest support for attachment download and remove redundant decorators

(`login_or_digest` calls `login_and_domain_required` as long as the user isn't anonymous so the second decorator was not doing anything)