Caching vendor requests along cache-control max-age

Fixes #266