#1613 changes to the HTTP response for private resources

On unauthorized request:
*  status = 403
*  Pragma = no-cache
*  Cache-Control = no-cache
Nose tests for hdx search result counts