- Allow access to ping endpoint without a token
- Allow access to download endpoints without a token, if the project
  is public
- Instead of throwing UnauthorizedError when no token is provided,
  continue with anonymous privileges
- Update tests to reflect the above changes
- Add test for downloading without a token