I believe we'll have to change this name before 1.0. We'll probably have at least 2 different "cookie authenticator services", one server-based and one client-based. This one uses the cache, so maybe we should still call it `CacheAuthenticatorService`.