Make sure Set-Cookie responses are not cacheable, and log violations

Change-Id: Ia15b2dd16151fcabcb5fae8e6b8123572255c098
Merge "Make sure Set-Cookie responses are not cacheable, and log violations" into production