Download link working correctly. Note that protect_from_forgery is disabled on Favourites#download so that users can download geoJSON