node: send "Content-Disposition: attachment;"

For the `.attachment()` function.

This must have been a copy+paste error, because the comment for
this function already specifies that it writes "attachment", it
just wasn't the case in the source code.