enable 'public' and '304s' for anonymous access in caching_policy_manager.
use no_store instead of no_cache for authenticated in caching_policy_manager.

so that pages rendered as authenticated will never be displayed after logout.
apply caching policy manager in WebSection.__call__.

otherwise Web Section or Web Site without default Web Page does not contain cache related headers.