That’s how I had my download page setup as well. But since the download links themselves are now password protected, I removed the password protection from the actual download page since a visitor to it will not be able to actually download the files without the password. So the download page is now public but they can’t access the actual download link without its password.
Not sure if there is a better way (I’ve been waiting to hear back from an official plugin person) but for now at least, it works for me since I don’t want the person having to enter a password to access the download page and then another password to access the actual link.
