Attachments download: we weren't even setting Content-Type properly :P