enforced download authentication against current logged user