1. can download files without login (`bdstoken` is null)

2. fix an error when filename contains non-ASCII characters