Cache UPNs by SID for three hours

Hopefully a better fix to #162 which should only penalize a small number of connections.

Seriously, though, a better server-side auth method would do much more for fixing this.