b7b6ee0118
Downloads have to present the same bearer-vs-cookie choice as oauth REST. A cookie-only save against a cookieless native session is the Files-panel 401. Co-authored-by: 686f6c61 <github@00b.tech>