Guard against the request object not having a user attribute in my Who's online middleware. This can happen if a redirect is issued before the authentication middleware gets to run.

#downloads-search {
   text-align: center;
}
#downloads-add td {
    padding-bottom: 5px;
}

#downloads-add fieldset {
    margin: 1em 0 1em;
    padding: 0.5em;
}