Caching was still only dependent on `_id`; fixed by considering also `_token`