auth-fetch: ask to never cache responses

I could have factored out all the lines that set cache headers, but
that would have made future merges even more complicated ☹️

thanks ShittyCopper for reporting the problem!