could we comment before this line again? "We do the original request with the user hash as provided by the backend. We want to cache even when the Cookie or Authorization header are present. It is the responsibility of the backend to Vary on the user hash to separate cached data."