allow external users to download files