cache-control:private header for authorized user
cache-control:private for authorized user unit test