Send headers before output buffer is flushed for file_download.php

Content-* headers and etc should be sent before the output buffer is
flushed at the start of file transfers. These headers have also been
reordered so they're grouped together more logically.

Also inline_file_exts can now be blank without the 'gif' attachment
being forcefully added by Mantis.