removed must_revalidate from HTTP headers