move CSV content-type header into controller, still does not work though :-(
Fix content-type problem with CSV downloads