Token protect download/view actions.

This is as much a security risk as a weak password, since an attacker
has to know the mailbox/UID of the message. But doesn't hurt to protect.