user/passw now in vars
fixed filenames with '/' and '\'
added: check for existing dir
fix: remove '.x-forcedownload' from filenames
ignore file with private data