cookie cache works, also, User.logged_in_user cached in request object