cleanups for DownloadAuth

remove unused session variable, div id quoted, better conditional
statements
test correct timed eviction in TimedEvictingQueue