use the 'download' HTML5 attribute instead of the false URL