Don't cache Set-Cookie headers

A giant security hole.