use the sha/blob api to grab files instead of the contents url

This should permit larger file sizes. Needs review.