'max-age' and 'public' response directives are out of place
'max-age' and 'public' response directives are out of place