Fix for CakeResponse::sharable() header to include private caches

$public = true would set only "s-maxage" header which is respected by proxies but ignored by browsers. Changed to set "max-age" header which is respected by both proxies and browsers (irrespective of value of  $public).
#3858