add optional support for the X-Sendfile header

this uses less overhead than php's readfile() by letting the web server do the transfer for us