can now view private files with query string modification