(feature)-authentication for file download