use ?download=1 to trigger download in /files/

sets `Content-Disposition: attachment...`

- master sets this unconditionally
- 2.x sets this iff file is a notebook

closes #6826