currentUser gets cached
It turns out the cache-control headers weren't coming through at the end.
I solved the problem by adding all the right headers.
Header set Cache-Control &quot;max-age=0, no-cache, no-store, must-revalidate&quot;
Header set Pragma &quot;no-cache&quot;
Header set Expires &quot;Wed, 12 Jan 1980 05:00:00 GMT&quot;