setting last-response-header for direct file download