@dbltoe, did you enable the site's download page as valid for use during guest-checkout (Configuration->One-Page Checkout Settings->Guest Checkout: Pages Allowed Post-Checkout)?

On my test setup, I was receiving a login timeout when attempting to download a download from the post-checkout "success" page until I changed the above setting. I'll need to add that to the OPC's start-up configuration documentation.