Add Content-Security-Policy-Report-Only and basic cache control extension