Set correct description for enable in user-context, set correct priority for the listener (just after firewall which is 8), and set the max-age to 0 to force a not cached head request if we don't want to cache it