add download command (unsecured)