Content-disposition header + Response validation settings

Closes #251