X-Download-Options header support

This adds support for the `X-Download-Options` header as described in #62. It works like all other header implementations: defining a default, allow disabling with `false`. The one thing I wasn't sure of was whether other values were valid beyond `noopen`. I found it pretty hard to dig up much info on `X-Download-Options`.
Oops! Good catch, just pushed a fix.