Fixed bug in user authentication

When the user is not in cache, or could not be deserialized, treat as unauthenticated and require new loging.