sets Cache-Control header to no-cache no-store