Add "public" to cache control headear if appropriate
Add static pages (robots.txt. favicon.ico)
Capture attempts to get files that should not be permitted