updates to cdn.yml
Explicitly set cache-control to public
Ensure GA and eloqua don't load in the head