Fixes for #467

Decode string in Content-disposition header parameter such as "filename" properly.

this looks a little suspicious, are you sure no `\w` are fine too ? -> `\w+` maybe ?