Added the Content-Disposition header to downloads.
Removed the explicit log4j dependency.

It should get pulled in as a transitive dep.