This needs to go into a FAQ somewhere. To force the browser
to download the data instead of displaying it, it's usually adequate
to use
Content-type: application/octet-stream
You can also suggest the name the file will be saved as by using
Content-Disposition: attachment; filename=xyz