Added no-auth session caching (insecure: no-auth is temp anyways)