Remove capacity/csv from public URLs

With the new cookie-based authentication this download link does
not need anymore to be publicly accessible (the X-Auth-Token header
was the reason to first make the link public).

Change-Id: If72bb8fe764810c565fc08f960db3e19ddaf4fb9
Closes-Bug: #1362615
Related-Bug: #1379000
(cherry picked from commit 7bd6b11e6808eebdcb12310c3a13d2e9583a8f44)