removed login requirement; added content type to file download to preserve extension on safari