add cache-control headers. allow default config values