fix cache-control; switch to spdy instead of vanilla https