Add test to ensure access control on download endpoints
Fix downloads in the web client

The authentication change broke them.
Get uploads actually working in phantomjs environment

This was tougher than it sounds.
Unbreak other test
Add a test for downloading behavior

It's mocked since phantom chokes on hard redirects
Merge pull request #334 from girder/fix-web-client-downloads

Fix web client downloads