fixing small issue in the prep templates download permissions

in other places in the codebase, we have used `_id`