curl -> downloading using cookie auth