Thanks to Carlos Galindo for the tip. He helped me earlier today. "I am not using web2py's auth to download the uploaded files, I just reference them directly with URL('static', 'myfolder/' + uploadfieldvalue) ... where uploadfieldvalue is the uploaded file name stored in the field."
I believe his solution is what I need. Massimo would you be kind enough to confirm this? -David