What’s cacheable?
HTTP/1.1 allows caching anything by default
Unless explicit Cache-Control header
In practice, most caches avoid anything with
Cache-Control/Pragma header
Cookie/Set-Cookie headers
WWW-Authenticate/Authorization header
POST/PUT method
302/307 status code