Redirect unauthenticated download requests instead of 404ing