added the cache-control from varnish for everything but token