Right now we're not doing any streaming and this isn't ideal. I'll need to figure it out at some point.
Right now we are just listing files in a given subdirectory with not authentication.