Add must-revalidate to cache-control