fix #1320 returning Last-Modified header along with ETag

This is a targeted fix addressing vfs and etag/Last-Modified header.   

- Only `/vfs/` endpoint that we will return Last-Modified header along with etag.
- Only GET, PUT and HEAD Http verbs.