Expiration headers are missing which is correct for development but in production it should use reasonable expiration or even better use far future expiration with unique URL.