check ob_get_level() before ob_flush()
Merge pull request #5261 from sadapon2008/2.x-response-ob_flush

an unnecessary E_NOTICE caused by CakeResponse::download()