api: Fix endpoint responses that must not be cached

Due to a recent factoring related to api_* decorators, the effect of
the never_cache django decorator was not applied anymore.

So add a never_cache parameter to the api_route decorator ensuring
cache-control reponse header will be set when required.

Also add missing tests checking cache-control header in api responses.

Closes T2810