Remove capacity/csv from public URLs

With the new cookie-based authentication this download link does
not need anymore to be publicly accessible (the X-Auth-Token header
was the reason to first make the link public).

Change-Id: If72bb8fe764810c565fc08f960db3e19ddaf4fb9
Closes-Bug: #1362615
Related-Bug: #1379000
Merge "Remove capacity/csv from public URLs"