Add no-cache control header to most api responses

This makes me rather uncomfortable, but it does make logical sense, and
should hopefully fix #1059