add cache header and secure mode tests