hotfix : restrict other "in db" modules to be download-able

currently, list module that can be downloaded comes from ApplicationConfig which should be avoided and should use in db modules instead.
is loop in factory ok ? or create new service just to collect array of moduleName ? or use loop in controller instead ?