obfuscated fonts now work in both byte range mode (even though the actual filter does not support it => fallback to whole content stream), and non-byte-range mode. also added missing HTTP mime type headers