Added secure download of files.
Note that a .htaccessf file should be created in the uploads/documents folder in order to deny access from outside.