Made the server send back a content-disposition: attach, in case chrome messes up the PDF.
Fixed a bug where the filename was not being escaped