Fall back on API authentication for the download view (#1876)