Escape user file names in download links. fix #74