Ensure skip session data

- Adds assertions that check if the Set-Cookie header is being stripped out when using the `set_cache_control_headers` helper.
- renames the surrogate_control_headers to surrogate_key_headers which is more appropriate