Allow customising the HTTP Cache-Control defaults.

This is my proposed fix for #3501.