Add Cache-Control header

This update adds support for the `Cache-Control` header to control caching of sensitive content. By default, the header is set to `No-Cache`. When `No-Cache` is detected, the HTTP 1.0 `Pragma: NO-CACHE` header is also added.