Set taxon_id in URL, rather than relying on http referrer

This removes a lot of terrible code from the ProductsController *AND* allows us to support ConditionalGet requests for ProductsController for anonymous users.

 sers who are signed in will get this page rendered by Rails on every request, but there's a cache block around the worst of it.