added a new download route that keeps a record of who downloads a particular file