response.header() can now overwrite default response headers such as cache-control