Disable caching headers for all API requests

[cofiem]

What's the reasoning behind this one?

[atruskie]

On navigating back from the main site to the angular app, Chrome would pull content from it's cache.

Apparently Chrome in particular likes to ignore most cache headers including accept type. So instead of JSON I got HTML. We haven't seen this before because most API routes are actually different from the others (because they are flattened). Projects was the exception.

So for that bug and generally I also don't think API's should be blanket cached...

Also adding cache header for varies-by: Accept or similar should be added to everything else.

[cofiem]

Long story short: wow, this is messed up. Some links for reference:

• When an html page requests json from the same url, navigating elsewhere and hitting back shows the json
• back button results in naked json
• We are entering a new, enlightened age. An age where a url can provide a resource in multiple formats.
• Vary Header for RESTful Applications
• Trying to understand the “Vary” HTTP header

[cofiem]

This requires more research and a better idea of the pros/cons.

[cofiem]

Possibly related to or could be fulfilled by #162