added a cache for authorization to the Api servlet