studpath: Added "authorize" function which checks the logged in user against the path they are trying to access. fileservice, server, download: Call authorize before doing anything. Note: server does a bit more because in public mode it checks svn status instead of calling studpath.authorize (NYI).