Uses iframes for externalDownloads instead of popups

addresses #6