This is perfect, for completeness, you can extend it with CORS + no-store and ms epoch.