I think this also wants to take into account user. Is there something in the request that is unique for the user?