RFC 6266 style Content-Disposition headers

This is all about nla/banjo/issues/341

For better behaviour in web browsers we need to do the `Content-Disposition` headers correctly.