use full domain qualified paths for downloads (so pages can be shared with bitmask...