specify no-cache in response headers, otherwise IE caches responses