Serve a plain "Cache-Control: public" header with non-timestamped assets