logged in users can bypass cache with query var