added XPermittedCrossDomainPolicies header support
add X-Download-Options documentation to README
Merge pull request #123 from stve/x-permitted-cross-domain-policies

X-Permitted-Cross-Domain-Policies support