Always record module downloads without auth key

If auth keys are enabled, all downloads, including those without auth keys, should be recorded.