added tracking to file download and restricted /FileDownload to Role_User and RoleAdmin