That's what is doing the `rescue_from CanCan::AccessDenied `.  Only CatalogController has `include Hydra::Controller::ControllerBehavior`, so if your download controller is separate, it would need it to, right?