Don't override Cache-Control headers if set

Cache-Control header is overridden when testing. I wasn't sure if this was intentional, so I've set no-cache only if Cache-Control isn't included in the response.