Restrict downloads

Sneaks in feature response stub for offline testing

Closes #105 
Restricts download paths to only logged in users. Restrictions add to `show` and `file` actions in `DownloadController`.