track set-cookie vs. cache-control