authorized file downloads