Api: set sensible cache headers