add expires header and make cache-control public