fixed security cache control