jsonapi: fix location headers, make POST responses consistent