secure https
fix caching of long-lived static resources