Fix EZP-21991: UserHash should be cached tied to user session id, not user cookies