Cache-Handle: no-cache and Cache-Command: private clash - you should by no means get equally together: the former tells browsers and proxies never to cache at all, the latter tells proxies never to cache but lets browsers maintain their own individual private duplicate. Be aware that https is required simply because https://www.aeroindustrial.com/seguridad-publica/