Send a Location header on a success response, as well as the body

- The tests for the presence of `/guidance/MANUAL_SLUG` come after the
  assertion `assert_publishing_api_put_item`, because it made more sense
  to me to have them after the thing is sent to publishing API, even
  though the test passes with it before that assertion.