BAC-1068: don't cache auth tokens