Allow from all
Header set Content-Disposition attachment

