Refactoring: rename SessionUtil to CurrentUser (matches better what it is made for).
Security fix: when user logs out, remove data from cache too.