Revert "Seems that setting content-disposition: attachment... as we do to force a download with correct filename breaks CORS on Safari. So defaulting to not sending this header for soft redirects."
Revert "Seems that setting content-disposition: attachment... as we do to force a download with correct filename breaks CORS on Safari. So defaulting to not sending this header for soft redirects."

Turned out the CORS setting on S3 needed tweaking for Safari compatibility.

This reverts commit b14e4870d066e857f3e1c3cafdf6e3224833b522.

T2DREAM/t2dream-portal,4dn-dcic/fourfront,philiptzou/clincoded,T2DREAM/t2dream-portal,ClinGen/clincoded,hms-dbmi/fourfront,ENCODE-DCC/snovault,ENCODE-DCC/snovault,ENCODE-DCC/encoded,ENCODE-DCC/snovault,kidaa/encoded,ClinGen/clincoded,T2DREAM/t2dream-portal,hms-dbmi/fourfront,ENCODE-DCC/encoded,kidaa/encoded,ENCODE-DCC/snovault,kidaa/encoded,T2DREAM/t2dream-portal,4dn-dcic/fourfront,philiptzou/clincoded,philiptzou/clincoded,ClinGen/clincoded,kidaa/encoded,ENCODE-DCC/encoded,hms-dbmi/fourfront,4dn-dcic/fourfront,4dn-dcic/fourfront,ENCODE-DCC/snovault,ENCODE-DCC/encoded,ClinGen/clincoded,philiptzou/clincoded,ClinGen/clincoded,philiptzou/clincoded,hms-dbmi/fourfront,kidaa/encoded,hms-dbmi/fourfront