Response::cache : security fix

Response::CACHE_PROTECTED now generate an only for client cached file.
Default homepage now use CACHE_PROTECTED status