Add cache headers for download endpoints

I'll indicate that this is optional