Use new StringFormatUtil.makeToken to set the filename param of the Content-Disposition header

- Remove PathUtil since it isn't used anywhere
- Move StringFormatUtilTest to access-common