Match File rows on the exact file_url when serving a private file

Private file lookup compares the URL exactly, since the database matches case-insensitively but files on disk do not.