fix bug in Access routes
add cache-control to catalog routes