Bugfix: Caching was not disabled for logged-in users

The Expire-Header is only sent, if the user is not logged in and has
no session.