diff --git a/dev/bench/data.js b/dev/bench/data.js
index 05ef3efa6..668119a61 100644
--- a/dev/bench/data.js
+++ b/dev/bench/data.js
@@ -1,5 +1,5 @@
 window.BENCHMARK_DATA = {
-  "lastUpdate": 1730479373524,
+  "lastUpdate": 1730479580046,
   "repoUrl": "https://github.com/pomerium/pomerium",
   "entries": {
     "Benchmark": [
@@ -128710,6 +128710,42 @@ window.BENCHMARK_DATA = {
             "extra": "199 times\n4 procs"
           }
         ]
+      },
+      {
+        "commit": {
+          "author": {
+            "email": "49699333+dependabot[bot]@users.noreply.github.com",
+            "name": "dependabot[bot]",
+            "username": "dependabot[bot]"
+          },
+          "committer": {
+            "email": "noreply@github.com",
+            "name": "GitHub",
+            "username": "web-flow"
+          },
+          "distinct": true,
+          "id": "aca1bc23db3b286b9e26eac17297e29b153d9d24",
+          "message": "chore(deps): bump the go group with 31 updates (#5351)\n\nBumps the go group with 31 updates:\r\n\r\n| Package | From | To |\r\n| --- | --- | --- |\r\n| [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) | `1.43.0` | `1.46.0` |\r\n| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.31.0` | `1.32.3` |\r\n| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.27.39` | `1.28.1` |\r\n| [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.63.3` | `1.66.2` |\r\n| [github.com/caddyserver/certmagic](https://github.com/caddyserver/certmagic) | `0.21.3` | `0.21.4` |\r\n| [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | `1.4.0` | `1.5.0` |\r\n| [github.com/envoyproxy/go-control-plane](https://github.com/envoyproxy/go-control-plane) | `0.13.0` | `0.13.1` |\r\n| [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.17.10` | `1.17.11` |\r\n| [github.com/mholt/acmez/v2](https://github.com/mholt/acmez) | `2.0.2` | `2.0.3` |\r\n| [github.com/minio/minio-go/v7](https://github.com/minio/minio-go) | `7.0.77` | `7.0.80` |\r\n| [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) | `0.69.0` | `0.70.0` |\r\n| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.20.4` | `1.20.5` |\r\n| [github.com/prometheus/common](https://github.com/prometheus/common) | `0.60.0` | `0.60.1` |\r\n| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.30.0` | `1.31.0` |\r\n| [go.opentelemetry.io/otel/bridge/opencensus](https://github.com/open-telemetry/opentelemetry-go) | `1.30.0` | `1.31.0` |\r\n| [go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.30.0` | `1.31.0` |\r\n| [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://github.com/open-telemetry/opentelemetry-go) | `1.30.0` | `1.31.0` |\r\n| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.30.0` | `1.31.0` |\r\n| [go.opentelemetry.io/otel/metric](https://github.com/open-telemetry/opentelemetry-go) | `1.30.0` | `1.31.0` |\r\n| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.30.0` | `1.31.0` |\r\n| [go.opentelemetry.io/otel/sdk/metric](https://github.com/open-telemetry/opentelemetry-go) | `1.30.0` | `1.31.0` |\r\n| [go.opentelemetry.io/otel/trace](https://github.com/open-telemetry/opentelemetry-go) | `1.30.0` | `1.31.0` |\r\n| [go.uber.org/mock](https://github.com/uber/mock) | `0.4.0` | `0.5.0` |\r\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.27.0` | `0.28.0` |\r\n| [golang.org/x/net](https://github.com/golang/net) | `0.29.0` | `0.30.0` |\r\n| [golang.org/x/sys](https://github.com/golang/sys) | `0.25.0` | `0.26.0` |\r\n| [golang.org/x/time](https://github.com/golang/time) | `0.6.0` | `0.7.0` |\r\n| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.199.0` | `0.203.0` |\r\n| [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto) | `0.0.0-20240903143218-8af14fe29dc1` | `0.0.0-20241015192408-796eee8c2d53` |\r\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.67.0` | `1.67.1` |\r\n| google.golang.org/protobuf | `1.34.2` | `1.35.1` |\r\n\r\n\r\nUpdates `cloud.google.com/go/storage` from 1.43.0 to 1.46.0\r\n- [Release notes](https://github.com/googleapis/google-cloud-go/releases)\r\n- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)\r\n- [Commits](https://github.com/googleapis/google-cloud-go/compare/pubsub/v1.43.0...spanner/v1.46.0)\r\n\r\nUpdates `github.com/aws/aws-sdk-go-v2` from 1.31.0 to 1.32.3\r\n- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)\r\n- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.31.0...v1.32.3)\r\n\r\nUpdates `github.com/aws/aws-sdk-go-v2/config` from 1.27.39 to 1.28.1\r\n- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)\r\n- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.27.39...config/v1.28.1)\r\n\r\nUpdates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.63.3 to 1.66.2\r\n- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)\r\n- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.63.3...service/s3/v1.66.2)\r\n\r\nUpdates `github.com/caddyserver/certmagic` from 0.21.3 to 0.21.4\r\n- [Release notes](https://github.com/caddyserver/certmagic/releases)\r\n- [Commits](https://github.com/caddyserver/certmagic/compare/v0.21.3...v0.21.4)\r\n\r\nUpdates `github.com/cloudflare/circl` from 1.4.0 to 1.5.0\r\n- [Release notes](https://github.com/cloudflare/circl/releases)\r\n- [Commits](https://github.com/cloudflare/circl/compare/v1.4.0...v1.5.0)\r\n\r\nUpdates `github.com/envoyproxy/go-control-plane` from 0.13.0 to 0.13.1\r\n- [Release notes](https://github.com/envoyproxy/go-control-plane/releases)\r\n- [Changelog](https://github.com/envoyproxy/go-control-plane/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/envoyproxy/go-control-plane/compare/v0.13.0...v0.13.1)\r\n\r\nUpdates `github.com/klauspost/compress` from 1.17.10 to 1.17.11\r\n- [Release notes](https://github.com/klauspost/compress/releases)\r\n- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml)\r\n- [Commits](https://github.com/klauspost/compress/compare/v1.17.10...v1.17.11)\r\n\r\nUpdates `github.com/mholt/acmez/v2` from 2.0.2 to 2.0.3\r\n- [Release notes](https://github.com/mholt/acmez/releases)\r\n- [Commits](https://github.com/mholt/acmez/compare/v2.0.2...v2.0.3)\r\n\r\nUpdates `github.com/minio/minio-go/v7` from 7.0.77 to 7.0.80\r\n- [Release notes](https://github.com/minio/minio-go/releases)\r\n- [Commits](https://github.com/minio/minio-go/compare/v7.0.77...v7.0.80)\r\n\r\nUpdates `github.com/open-policy-agent/opa` from 0.69.0 to 0.70.0\r\n- [Release notes](https://github.com/open-policy-agent/opa/releases)\r\n- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/open-policy-agent/opa/compare/v0.69.0...v0.70.0)\r\n\r\nUpdates `github.com/prometheus/client_golang` from 1.20.4 to 1.20.5\r\n- [Release notes](https://github.com/prometheus/client_golang/releases)\r\n- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/prometheus/client_golang/compare/v1.20.4...v1.20.5)\r\n\r\nUpdates `github.com/prometheus/common` from 0.60.0 to 0.60.1\r\n- [Release notes](https://github.com/prometheus/common/releases)\r\n- [Changelog](https://github.com/prometheus/common/blob/main/RELEASE.md)\r\n- [Commits](https://github.com/prometheus/common/compare/v0.60.0...v0.60.1)\r\n\r\nUpdates `go.opentelemetry.io/otel` from 1.30.0 to 1.31.0\r\n- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)\r\n- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.30.0...v1.31.0)\r\n\r\nUpdates `go.opentelemetry.io/otel/bridge/opencensus` from 1.30.0 to 1.31.0\r\n- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)\r\n- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.30.0...v1.31.0)\r\n\r\nUpdates `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc` from 1.30.0 to 1.31.0\r\n- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)\r\n- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.30.0...v1.31.0)\r\n\r\nUpdates `go.opentelemetry.io/otel/exporters/otlp/otlptrace` from 1.30.0 to 1.31.0\r\n- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)\r\n- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.30.0...v1.31.0)\r\n\r\nUpdates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.30.0 to 1.31.0\r\n- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)\r\n- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.30.0...v1.31.0)\r\n\r\nUpdates `go.opentelemetry.io/otel/metric` from 1.30.0 to 1.31.0\r\n- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)\r\n- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.30.0...v1.31.0)\r\n\r\nUpdates `go.opentelemetry.io/otel/sdk` from 1.30.0 to 1.31.0\r\n- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)\r\n- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.30.0...v1.31.0)\r\n\r\nUpdates `go.opentelemetry.io/otel/sdk/metric` from 1.30.0 to 1.31.0\r\n- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)\r\n- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.30.0...v1.31.0)\r\n\r\nUpdates `go.opentelemetry.io/otel/trace` from 1.30.0 to 1.31.0\r\n- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)\r\n- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.30.0...v1.31.0)\r\n\r\nUpdates `go.uber.org/mock` from 0.4.0 to 0.5.0\r\n- [Release notes](https://github.com/uber/mock/releases)\r\n- [Changelog](https://github.com/uber-go/mock/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/uber/mock/compare/v0.4.0...v0.5.0)\r\n\r\nUpdates `golang.org/x/crypto` from 0.27.0 to 0.28.0\r\n- [Commits](https://github.com/golang/crypto/compare/v0.27.0...v0.28.0)\r\n\r\nUpdates `golang.org/x/net` from 0.29.0 to 0.30.0\r\n- [Commits](https://github.com/golang/net/compare/v0.29.0...v0.30.0)\r\n\r\nUpdates `golang.org/x/sys` from 0.25.0 to 0.26.0\r\n- [Commits](https://github.com/golang/sys/compare/v0.25.0...v0.26.0)\r\n\r\nUpdates `golang.org/x/time` from 0.6.0 to 0.7.0\r\n- [Commits](https://github.com/golang/time/compare/v0.6.0...v0.7.0)\r\n\r\nUpdates `google.golang.org/api` from 0.199.0 to 0.203.0\r\n- [Release notes](https://github.com/googleapis/google-api-go-client/releases)\r\n- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)\r\n- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.199.0...v0.203.0)\r\n\r\nUpdates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20240903143218-8af14fe29dc1 to 0.0.0-20241015192408-796eee8c2d53\r\n- [Commits](https://github.com/googleapis/go-genproto/commits)\r\n\r\nUpdates `google.golang.org/grpc` from 1.67.0 to 1.67.1\r\n- [Release notes](https://github.com/grpc/grpc-go/releases)\r\n- [Commits](https://github.com/grpc/grpc-go/compare/v1.67.0...v1.67.1)\r\n\r\nUpdates `google.golang.org/protobuf` from 1.34.2 to 1.35.1\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: cloud.google.com/go/storage\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: github.com/aws/aws-sdk-go-v2\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: github.com/aws/aws-sdk-go-v2/config\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: github.com/caddyserver/certmagic\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-patch\r\n  dependency-group: go\r\n- dependency-name: github.com/cloudflare/circl\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: github.com/envoyproxy/go-control-plane\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-patch\r\n  dependency-group: go\r\n- dependency-name: github.com/klauspost/compress\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-patch\r\n  dependency-group: go\r\n- dependency-name: github.com/mholt/acmez/v2\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-patch\r\n  dependency-group: go\r\n- dependency-name: github.com/minio/minio-go/v7\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-patch\r\n  dependency-group: go\r\n- dependency-name: github.com/open-policy-agent/opa\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: github.com/prometheus/client_golang\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-patch\r\n  dependency-group: go\r\n- dependency-name: github.com/prometheus/common\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-patch\r\n  dependency-group: go\r\n- dependency-name: go.opentelemetry.io/otel\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: go.opentelemetry.io/otel/bridge/opencensus\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: go.opentelemetry.io/otel/metric\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: go.opentelemetry.io/otel/sdk\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: go.opentelemetry.io/otel/sdk/metric\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: go.opentelemetry.io/otel/trace\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: go.uber.org/mock\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: golang.org/x/crypto\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: golang.org/x/net\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: golang.org/x/sys\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: golang.org/x/time\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: google.golang.org/api\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: google.golang.org/genproto/googleapis/rpc\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-patch\r\n  dependency-group: go\r\n- dependency-name: google.golang.org/grpc\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-patch\r\n  dependency-group: go\r\n- dependency-name: google.golang.org/protobuf\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
+          "timestamp": "2024-11-01T09:42:59-07:00",
+          "tree_id": "2c0b30a14b14365315fa7692f4489a56880399b9",
+          "url": "https://github.com/pomerium/pomerium/commit/aca1bc23db3b286b9e26eac17297e29b153d9d24"
+        },
+        "date": 1730479566654,
+        "tool": "go",
+        "benches": [
+          {
+            "name": "BenchmarkLoggedInUserAccess",
+            "value": 9321180,
+            "unit": "ns/op",
+            "extra": "130 times\n4 procs"
+          },
+          {
+            "name": "BenchmarkLoggedOutUserAccess",
+            "value": 6422619,
+            "unit": "ns/op",
+            "extra": "181 times\n4 procs"
+          }
+        ]
       }
     ]
   }