moved download urls to app (rather than direct from S3) for tracking and error reporting purposes