Do sanity check on content type of URL passed in. People keep passing in urls that point to pdfs