Add configurable switches for download controls

[kauberry]

Need to put logic in place to handle enableing/disabling single file downloads, as well as whether or not to require auth/authz for cart download