added username to the cache key
and added tracking of usernames which have been used in keys for invalidation