auth - via cookie cahce should track user auth changed the upadte