The download was using the current user to build the URL which is not correct since the user may not be the owner. Fixes #77