It looks like "Security Token" issue is more vBulletin problem, not DownloadsII. Correct me if I am wrong.
So far I commented out the following code in downloads.php. It disables the time limit feature, but allows to download.
PHP Code:
if (!verify_security_token($vbulletin->GPC['actionhash'], $vbulletin->userinfo['securitytoken_raw']))
{
eval(standard_error(fetch_error('security_token_invalid', $vbulletin->options['contactuslink'])));
}