upload - set Expires header of 7 days for fonts/images

Only for fonts and images though, as these are very static. As the
site is in flux it's preferable to use URL fingerprinting and
Expires for CSS/JS resources.