play non-public files

[pierrel]

need to grab the S3Ajax signed get request and use that in the src attr of the player and what's passed to the ID3 lib.