Use header_register_callback to avoid caching responses with Set-Cookie headers