Minor fix

- Respecting `Cache-Control` header with `private` attribute when acting as a server