fix issue #165 - explicit cache control headers disallowing caching of t...

...he dynamic provision.js file

Because this code uses a template to render provision.js, and embeds current logged in state into it, and because android 2.x has extremely aggressive caching behavior when no headers are present, this fixes the issues we were seeing with login not working from android devices.