Try changing the Expires header to an RFC 1123 date format. According to the
RFC spec, it requires the following format: Thu, 01 Dec 1994 16:00:00 GMT

Try this:
<cfheader name="Expires" value="#GetHttpTimeString(DateAdd('d', -1, Now()))#">

Hope this helps!