added no-cache and must revalidate headers to all api responses