set Cache-Control to no-store, no-cache, must-revalidate, post-check=0, pre-check=0