use HTML5 download attribute rather than hitting a server