add test
upgrade guava from 11.0.1 to 14.0.1
make session cache key dependent on credential (credential change will enforce an new session)