fix protected download path for django-sendfile