anonymous users can now query by md5, filename, and combination. Returns
404 when
  md5 supplied is not valid, regardless of filename
  filename suplied is not valid, regardless of md5
ALL TESTS PASS