add cache headers to security