downloads: Require login for downloading protected file