We must keep caching in place, just do it private per session. Try something like `cache_control = {'max_age': 3600, 'private':True}`. See related documentation here: https://docs.djangoproject.com/en/1.4/topics/cache/#controlling-cache-using-other-headers.

Optimally we should upstream cache all the anonymous requests, keep private only authenticated requests. Let's keep that in mind in case we want to optimize the speed later.