DDF-407 added in the returning of the filename in the Content-Disposition http header (inline; filename=<filename>).  Also cleaned up the error handling so it didn't return stack traces or package names and set the proper content type when sending back errors (text/plain)