auth on download csv