avoid implying cachability where that could break things (e.g. use the correct response code instead of blanket 200, set Cache-Control)

[jumpy-cat]