HTTP cache: disable for authenticated users

This imitates the behavior that in theory
`CACHE_MIDDLEWARE_ANONYMOUS_ONLY = True` had.

Refs. https://code.djangoproject.com/ticket/15201

Follow-up of #207.