.htaccess

Added an .htaccess file to the downloads directory with "deny from all". No one can access your files directly, only through the application that keeps track of number of downloads allowed and expiry time. Of course, this only applies to apache servers.

Also fixed up the sample data so you have a track to download, not just a preview to listen to!