Remove one of the \n characters in the Content-Disposition header. The \n\n marks the end of the headers.

See this part of the HTTP/1.1 specification for more information.

Arjen

Update: Although this works, all the occurrences of \n should be replaced with \r\n (Carriage Return, Newline) to adhere completely to the standard.