actually set mime type when returning the iframe source