Anonymous visitors no longer set cookie until auth attempt
Members-only pages can now be cached for members too