1. can download files without login (`bdstoken` is null)
2. fix an error when filename contains non-ASCII characters