if we thought the request was auth'd based on the cookie, but the ETag says it wasn't (first field is user), make sure we cache this as the anon variant. fixes caching of requests with malformed or invalid session cookies