server: add Expires header for caching