I once made a video site for a client. Instead of linking directly to the mp4 file, I linked to a PHP script which redid the login checks, cookie checks, referer checks, etc, and then rendered the file. So directly by looking at the source code, one cannot use the video URL to download the video... However, the streaming option in the answer above sounds very good, and much better.