drop user permissions to enable anonymous download