removed unecessary auth when responding with cached