Require authorized user to download diagnostics.zip

Tested manually: before the code change, visiting the zip file URL
successfully generated and downloaded the diagnostics .zip file; after
the fix, the GET now returns " [403  Forbidden] " from an anonymous
window, but generates the .zip file when the admin is logged in.