moved private collection file serving to sendfile