Prevent Firefox from attempting to install the XPI

By using HttpResponse() and "Content-Disposition: attachment", this
wouldn’t work with the redirect() call that was used before, but I’m not
sure the redirection is really needed after 1cf39da.