do I need authentication to download from S3?