Cache-Control: no-store
Set-Cookie: foo=bar