Fix cache-control header for API routes

closes #4157

- adds cache-control header back to api routes
- moves cache rules object into testUtils
- adds cache-control header test to every existing API test
Merge pull request #4158 from ErisDS/issue-4157

Fix cache-control header for API routes