Add Cache-Control header to prevent browser caching of SAML auth location