don't replace Cache-Control header, to allow script to set additional values