This is similar to question Set Cache-Control: no-cache on GET requests, which wasn't really answered.
In the API responses, the cache-control header is being set to private, and I'm pretty sure I need No-Cache. I tried a ResponseFilter, but the value didn't change. It's not obvious where this is being added or set in the code or how to override, so any guidance would be appreciated.