Not sure if this is a bug or what.
But the download token :
should be usable only once, or at least should be invalid after 5 minutes.
This is making problem since uploaders post on forums/site the link with their download token, and this make some big and serious problem:
1) the token is a premium one, so users download at max speed even if they are guest
2) with the token users start then download directly, so they don't see the download page aka the ads. So uploaders make revenue but site not since no ads is being displayed.