Clarified CACHED_AUTH_PREPROCESSOR must return user

Updated README to indicate the CACHED_AUTH_PREPROCESSOR function has to return the user object.
Merge pull request #5 from tclancy/master

Clarified CACHED_AUTH_PREPROCESSOR must return user