set cache control headers servlet side instead