Only start caching when authItems collection has finished loading

- Otherwise the cache could be built from an incomplete tree, thereby
  denying users that should otherwise have access