decidePolicyForNavigationAction receives the headers, which should be properly piped to decidePolicyForNavigationResponse. It is possible that a web server expect some kind of token (like XSRF token) to properly return download.