#4163 update the localshop code for removing username/pass from uploading package; AMke changes for downloading via a common key