Middleware for IE security. Set X-Download-Options to noopen