IE caches get requests related to authenticate, checklogin, and logout in the rest api - no cache headers should be set so that the side effects of these methods (e.g. assigning/destroying a user session) occur correctly.

Longer term - these should probably be POST methods rather than GET