response = HttpResponse(mimetype='application/force-download')
response['Content-Disposition'] = 'attachment;filename="%s"' % filename
response['X-Sendfile'] = filename
How to make a private download area with django?