I don't think we want to be setting expiry headers on this controller.  Definitely not for the POST requests.

We're not setting expiry headers for any other API controllers, caching is currently controlled in API adapters.