Decentralized the setting of the Content-Type header - now more appropriately set in the controller.

Implemented download service. Only supports GET