Improved Downloads Authorization

Requires administrative permission to get the full-res from images and
redirects to nginx for lower resolution derivatives that are sitting
on disk. Allows download of full resolution PDFs.

Closes #365