The cookie value in the download endpoint is now optional and so is a query parameter rather than part of the path
