We might also want to set the content disposition header to attachment. This would cause the browser to download it and would discourage embedding the url in a page.