Get file from the right location if the client has a validated session