Does anyone know if there's some kind of permission caching with token-based authentication? I know connecting with username and password you have to switch roles back and forth or log out/in if you change the role permissions.