turn off header caching

if the browser sends if-modified-since apache would not call cgi
scripts but return 403 directly because the cgi script wasn't
modified.