update dependencies to latest
reenable permission caching
make permissions cache lifetime configurable
turn back on subscription caching
only update principal last_connection date once a minute
add caching to accessTokens fetchByToken
remove log spew