fix download of package in a private repository