diff --git a/dev/bench/data.js b/dev/bench/data.js
index cda577d12..ea94d3d4d 100644
--- a/dev/bench/data.js
+++ b/dev/bench/data.js
@@ -1,5 +1,5 @@
 window.BENCHMARK_DATA = {
-  "lastUpdate": 1717436671950,
+  "lastUpdate": 1717439939339,
   "repoUrl": "https://github.com/pomerium/pomerium",
   "entries": {
     "Benchmark": [
@@ -111058,6 +111058,42 @@ window.BENCHMARK_DATA = {
             "extra": "184 times\n4 procs"
           }
         ]
+      },
+      {
+        "commit": {
+          "author": {
+            "email": "49699333+dependabot[bot]@users.noreply.github.com",
+            "name": "dependabot[bot]",
+            "username": "dependabot[bot]"
+          },
+          "committer": {
+            "email": "noreply@github.com",
+            "name": "GitHub",
+            "username": "web-flow"
+          },
+          "distinct": true,
+          "id": "3fcce1d9ef182fe86755a631bd22c90350303eac",
+          "message": "chore(deps): bump the go group with 27 updates (#5122)\n\n* chore(deps): bump the go group with 27 updates\r\n\r\nBumps the go group with 27 updates:\r\n\r\n| Package | From | To |\r\n| --- | --- | --- |\r\n| [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) | `1.40.0` | `1.41.0` |\r\n| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.26.1` | `1.27.0` |\r\n| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.27.11` | `1.27.16` |\r\n| [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.53.1` | `1.54.3` |\r\n| [github.com/caddyserver/certmagic](https://github.com/caddyserver/certmagic) | `0.20.0` | `0.21.2` |\r\n| [github.com/docker/docker](https://github.com/docker/docker) | `26.1.1+incompatible` | `26.1.3+incompatible` |\r\n| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.5.5` | `5.6.0` |\r\n| [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) | `0.64.1` | `0.65.0` |\r\n| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.19.0` | `1.19.1` |\r\n| [github.com/prometheus/procfs](https://github.com/prometheus/procfs) | `0.14.0` | `0.15.1` |\r\n| [github.com/rs/zerolog](https://github.com/rs/zerolog) | `1.32.0` | `1.33.0` |\r\n| [github.com/shirou/gopsutil/v3](https://github.com/shirou/gopsutil) | `3.24.4` | `3.24.5` |\r\n| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.26.0` | `1.27.0` |\r\n| [go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.26.0` | `1.27.0` |\r\n| [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://github.com/open-telemetry/opentelemetry-go) | `1.26.0` | `1.27.0` |\r\n| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.26.0` | `1.27.0` |\r\n| [go.opentelemetry.io/otel/metric](https://github.com/open-telemetry/opentelemetry-go) | `1.26.0` | `1.27.0` |\r\n| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.26.0` | `1.27.0` |\r\n| [go.opentelemetry.io/otel/sdk/metric](https://github.com/open-telemetry/opentelemetry-go) | `1.26.0` | `1.27.0` |\r\n| [go.opentelemetry.io/otel/trace](https://github.com/open-telemetry/opentelemetry-go) | `1.26.0` | `1.27.0` |\r\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.22.0` | `0.23.0` |\r\n| [golang.org/x/net](https://github.com/golang/net) | `0.24.0` | `0.25.0` |\r\n| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.19.0` | `0.20.0` |\r\n| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.177.0` | `0.178.0` |\r\n| [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto) | `0.0.0-20240429193739-8cf5692501f6` | `0.0.0-20240515191416-fc5f0ca64291` |\r\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.63.2` | `1.64.0` |\r\n| google.golang.org/protobuf | `1.34.0` | `1.34.1` |\r\n\r\n\r\nUpdates `cloud.google.com/go/storage` from 1.40.0 to 1.41.0\r\n- [Release notes](https://github.com/googleapis/google-cloud-go/releases)\r\n- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)\r\n- [Commits](https://github.com/googleapis/google-cloud-go/compare/spanner/v1.40.0...spanner/v1.41.0)\r\n\r\nUpdates `github.com/aws/aws-sdk-go-v2` from 1.26.1 to 1.27.0\r\n- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)\r\n- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.26.1...v1.27.0)\r\n\r\nUpdates `github.com/aws/aws-sdk-go-v2/config` from 1.27.11 to 1.27.16\r\n- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)\r\n- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.27.11...config/v1.27.16)\r\n\r\nUpdates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.53.1 to 1.54.3\r\n- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)\r\n- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.53.1...service/s3/v1.54.3)\r\n\r\nUpdates `github.com/caddyserver/certmagic` from 0.20.0 to 0.21.2\r\n- [Release notes](https://github.com/caddyserver/certmagic/releases)\r\n- [Commits](https://github.com/caddyserver/certmagic/compare/v0.20.0...v0.21.2)\r\n\r\nUpdates `github.com/docker/docker` from 26.1.1+incompatible to 26.1.3+incompatible\r\n- [Release notes](https://github.com/docker/docker/releases)\r\n- [Commits](https://github.com/docker/docker/compare/v26.1.1...v26.1.3)\r\n\r\nUpdates `github.com/jackc/pgx/v5` from 5.5.5 to 5.6.0\r\n- [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md)\r\n- [Commits](https://github.com/jackc/pgx/compare/v5.5.5...v5.6.0)\r\n\r\nUpdates `github.com/open-policy-agent/opa` from 0.64.1 to 0.65.0\r\n- [Release notes](https://github.com/open-policy-agent/opa/releases)\r\n- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/open-policy-agent/opa/compare/v0.64.1...v0.65.0)\r\n\r\nUpdates `github.com/prometheus/client_golang` from 1.19.0 to 1.19.1\r\n- [Release notes](https://github.com/prometheus/client_golang/releases)\r\n- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/prometheus/client_golang/compare/v1.19.0...v1.19.1)\r\n\r\nUpdates `github.com/prometheus/procfs` from 0.14.0 to 0.15.1\r\n- [Release notes](https://github.com/prometheus/procfs/releases)\r\n- [Commits](https://github.com/prometheus/procfs/compare/v0.14.0...v0.15.1)\r\n\r\nUpdates `github.com/rs/zerolog` from 1.32.0 to 1.33.0\r\n- [Commits](https://github.com/rs/zerolog/compare/v1.32.0...v1.33.0)\r\n\r\nUpdates `github.com/shirou/gopsutil/v3` from 3.24.4 to 3.24.5\r\n- [Release notes](https://github.com/shirou/gopsutil/releases)\r\n- [Commits](https://github.com/shirou/gopsutil/compare/v3.24.4...v3.24.5)\r\n\r\nUpdates `go.opentelemetry.io/otel` from 1.26.0 to 1.27.0\r\n- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)\r\n- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.26.0...v1.27.0)\r\n\r\nUpdates `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc` from 1.26.0 to 1.27.0\r\n- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)\r\n- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.26.0...v1.27.0)\r\n\r\nUpdates `go.opentelemetry.io/otel/exporters/otlp/otlptrace` from 1.26.0 to 1.27.0\r\n- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)\r\n- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.26.0...v1.27.0)\r\n\r\nUpdates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.26.0 to 1.27.0\r\n- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)\r\n- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.26.0...v1.27.0)\r\n\r\nUpdates `go.opentelemetry.io/otel/metric` from 1.26.0 to 1.27.0\r\n- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)\r\n- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.26.0...v1.27.0)\r\n\r\nUpdates `go.opentelemetry.io/otel/sdk` from 1.26.0 to 1.27.0\r\n- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)\r\n- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.26.0...v1.27.0)\r\n\r\nUpdates `go.opentelemetry.io/otel/sdk/metric` from 1.26.0 to 1.27.0\r\n- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)\r\n- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.26.0...v1.27.0)\r\n\r\nUpdates `go.opentelemetry.io/otel/trace` from 1.26.0 to 1.27.0\r\n- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)\r\n- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.26.0...v1.27.0)\r\n\r\nUpdates `golang.org/x/crypto` from 0.22.0 to 0.23.0\r\n- [Commits](https://github.com/golang/crypto/compare/v0.22.0...v0.23.0)\r\n\r\nUpdates `golang.org/x/net` from 0.24.0 to 0.25.0\r\n- [Commits](https://github.com/golang/net/compare/v0.24.0...v0.25.0)\r\n\r\nUpdates `golang.org/x/oauth2` from 0.19.0 to 0.20.0\r\n- [Commits](https://github.com/golang/oauth2/compare/v0.19.0...v0.20.0)\r\n\r\nUpdates `google.golang.org/api` from 0.177.0 to 0.178.0\r\n- [Release notes](https://github.com/googleapis/google-api-go-client/releases)\r\n- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)\r\n- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.177.0...v0.178.0)\r\n\r\nUpdates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20240429193739-8cf5692501f6 to 0.0.0-20240515191416-fc5f0ca64291\r\n- [Commits](https://github.com/googleapis/go-genproto/commits)\r\n\r\nUpdates `google.golang.org/grpc` from 1.63.2 to 1.64.0\r\n- [Release notes](https://github.com/grpc/grpc-go/releases)\r\n- [Commits](https://github.com/grpc/grpc-go/compare/v1.63.2...v1.64.0)\r\n\r\nUpdates `google.golang.org/protobuf` from 1.34.0 to 1.34.1\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: cloud.google.com/go/storage\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: github.com/aws/aws-sdk-go-v2\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: github.com/aws/aws-sdk-go-v2/config\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-patch\r\n  dependency-group: go\r\n- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: github.com/caddyserver/certmagic\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: github.com/docker/docker\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-patch\r\n  dependency-group: go\r\n- dependency-name: github.com/jackc/pgx/v5\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: github.com/open-policy-agent/opa\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: github.com/prometheus/client_golang\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-patch\r\n  dependency-group: go\r\n- dependency-name: github.com/prometheus/procfs\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: github.com/rs/zerolog\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: github.com/shirou/gopsutil/v3\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-patch\r\n  dependency-group: go\r\n- dependency-name: go.opentelemetry.io/otel\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: go.opentelemetry.io/otel/metric\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: go.opentelemetry.io/otel/sdk\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: go.opentelemetry.io/otel/sdk/metric\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: go.opentelemetry.io/otel/trace\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: golang.org/x/crypto\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: golang.org/x/net\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: golang.org/x/oauth2\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: google.golang.org/api\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: google.golang.org/genproto/googleapis/rpc\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-patch\r\n  dependency-group: go\r\n- dependency-name: google.golang.org/grpc\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: google.golang.org/protobuf\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-patch\r\n  dependency-group: go\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\n\r\n* change acme pkg\r\n\r\n---------\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\r\nCo-authored-by: Denis Mishin <dmishin@pomerium.com>",
+          "timestamp": "2024-06-03T14:35:29-04:00",
+          "tree_id": "6d48b6abd3e26583b30f06ae8fc0e254c96ada19",
+          "url": "https://github.com/pomerium/pomerium/commit/3fcce1d9ef182fe86755a631bd22c90350303eac"
+        },
+        "date": 1717439929183,
+        "tool": "go",
+        "benches": [
+          {
+            "name": "BenchmarkLoggedInUserAccess",
+            "value": 9220508,
+            "unit": "ns/op",
+            "extra": "127 times\n4 procs"
+          },
+          {
+            "name": "BenchmarkLoggedOutUserAccess",
+            "value": 6300968,
+            "unit": "ns/op",
+            "extra": "187 times\n4 procs"
+          }
+        ]
       }
     ]
   }