infer content type from contents of file instead of its file extension
* defaults to application/binary as its more secure than octet-stream
* set nosniff header to instruct browsers not to guess content type
migration to set content types of all existing attachments
Merge pull request #1171 from opf/retrieve_content_type_from_file

infer content type from contents of file instead of its file extension