@app.route('/download', methods=['POST'])
def download():
    session_id = request.cookies.get('session_id')
    if session_id is None:
        return redirect('/login')
    username = session.get_username_by_session(session_id)
    download_token = jwt.create_download_token(username)
    file = request.form.get('file')
    s = requests.Session()
    params = {
        'token': download_token
    }
    x = s.get('http://cdn:5000/' + user + '/' + file, params=params)
    return x.content


@app.route('/upload', methods=['POST'])
def upload():
    session_id = request.cookies.get('session_id')
    if session_id is None:
        return redirect('/login')
    username = session.get_username_by_session(session_id)
    file = request.files.get('file')
    upload_token = jwt.create_upload_token()
    s = requests.Session()
    files = {
        'file': (file.filename, file)
    }
    params = {
        'username': username,
        'token': upload_token
    }
    s.post('http://cdn:5000/upload', files=files, params=params)
    return redirect('/index')