Fixed #15: Ensure we check for authorization for serving audio files, meaning we don't leak the absolute URL anymore