> ...however, this does not work properly. Rather than replacing the > header values, it appends them. For example: > Cache-Control: no-cache, private > > ...this is not the desired effect. > Any thoughts? Thanks!
The only thing odd about what you've described is that the cache headers are being sent automatically. In fact cache-control and pragma headers are expressly forbidden to be sent automatically - unless the user does a "hard" refresh, or perhaps if the markup contains pragma meta tags. Is your page using an HTML meta tag with pragma = "no-cache"? http://www.w3.org/TR/XMLHttpRequest/
