private data downloads now work; closing #1