Download multimedia from forms with no application

http://manage.dimagi.com/default.asp?148842#836468
According to http://stackoverflow.com/a/3705601/10840 the `&` characters in `href` attributes should be escaped as `&amp;`, although the very next comment (with way fewer votes) says it's safe not to... I'm going with more votes. I probably would not have caught this if not for github's fancy new syntax highlighting.

The same applies four lines below.