Add caching and CORS headers