Set the `Cache-Control` header value correctly

Use `Header merge` instead of `Header set` to add the `no-transform`
value to the `Cache-Control` HTTP response header. `Header set` will
just overwrite the `max-age` value set by `mod_expires`.

Ref: http://httpd.apache.org/docs/current/mod/mod_headers.html#header