Minor fixes

- Returning headers for 304 responses
- Correcting how Expires header is created
- Updating default `Cache-Control` with a `must-revalidate` directive