Adding automatic `private` directive to `cache-control` header when client is authenticated