Goodies

* Fix onPostRoute (closes #421)
* add cache control private/public via catbox (closes #373)
* iron and signed cookies (closes #347)
* Raw response interface change (closes #422)