Use bearer token authentication for file downloads

[ekraffmiller]

Currently in the SPA, file downloads are implemented by calling the API directly with a downloadURL. This doesn't work with bearer token authentication, so we need to create a use case for file download that can be called from the SPA.