Hi Patrick,
This is excellent! I removed the check on mustAuthenticate, and it's already working as expected. I am able to download the file through the velocity project.
I will follow the authentication steps once our application is in production already.
Thanks very much for the help!
Erik