bypass the cache with the auth cookie