fixes content-disposition bug reported by petr

@jrbl 

Missed a spot -- we weren't using url_monkeypatched to provide content-disposition.