serve static assets & set Cache-Control header