Correctly output Set-Cookie headers
Allow HEAD requests to hit the cache