X-UA-Compatible & X-XSS-Protection
remove ETags, push rewrite rules up above httpProtocol