diff --git a/dev/bench/data.js b/dev/bench/data.js
index 0462b1a6e..4a47c38af 100644
--- a/dev/bench/data.js
+++ b/dev/bench/data.js
@@ -1,5 +1,5 @@
 window.BENCHMARK_DATA = {
-  "lastUpdate": 1720203301938,
+  "lastUpdate": 1720207789242,
   "repoUrl": "https://github.com/pomerium/pomerium",
   "entries": {
     "Benchmark": [
@@ -114106,6 +114106,42 @@ window.BENCHMARK_DATA = {
             "extra": "169 times\n4 procs"
           }
         ]
+      },
+      {
+        "commit": {
+          "author": {
+            "email": "49699333+dependabot[bot]@users.noreply.github.com",
+            "name": "dependabot[bot]",
+            "username": "dependabot[bot]"
+          },
+          "committer": {
+            "email": "noreply@github.com",
+            "name": "GitHub",
+            "username": "web-flow"
+          },
+          "distinct": true,
+          "id": "8f8c66e9fdefd3c41446ef765ee7085987a57e97",
+          "message": "chore(deps): bump the go group with 21 updates (#5162)\n\n* chore(deps): bump the go group with 21 updates\r\n\r\nBumps the go group with 21 updates:\r\n\r\n| Package | From | To |\r\n| --- | --- | --- |\r\n| [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) | `1.41.0` | `1.42.0` |\r\n| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.27.0` | `1.30.1` |\r\n| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.27.16` | `1.27.23` |\r\n| [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.54.3` | `1.57.1` |\r\n| [github.com/caddyserver/certmagic](https://github.com/caddyserver/certmagic) | `0.21.2` | `0.21.3` |\r\n| [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | `1.3.8` | `1.3.9` |\r\n| [github.com/docker/docker](https://github.com/docker/docker) | `26.1.3+incompatible` | `27.0.3+incompatible` |\r\n| [github.com/go-chi/chi/v5](https://github.com/go-chi/chi) | `5.0.12` | `5.1.0` |\r\n| [github.com/gorilla/websocket](https://github.com/gorilla/websocket) | `1.5.1` | `1.5.3` |\r\n| [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.17.8` | `1.17.9` |\r\n| [github.com/minio/minio-go/v7](https://github.com/minio/minio-go) | `7.0.70` | `7.0.72` |\r\n| [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) | `0.65.0` | `0.66.0` |\r\n| [github.com/prometheus/common](https://github.com/prometheus/common) | `0.53.0` | `0.55.0` |\r\n| [github.com/spf13/viper](https://github.com/spf13/viper) | `1.18.2` | `1.19.0` |\r\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.23.0` | `0.24.0` |\r\n| [golang.org/x/net](https://github.com/golang/net) | `0.25.0` | `0.26.0` |\r\n| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.20.0` | `0.21.0` |\r\n| [golang.org/x/sys](https://github.com/golang/sys) | `0.20.0` | `0.21.0` |\r\n| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.178.0` | `0.183.0` |\r\n| [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto) | `0.0.0-20240515191416-fc5f0ca64291` | `0.0.0-20240528184218-531527333157` |\r\n| google.golang.org/protobuf | `1.34.1` | `1.34.2` |\r\n\r\n\r\nUpdates `cloud.google.com/go/storage` from 1.41.0 to 1.42.0\r\n- [Release notes](https://github.com/googleapis/google-cloud-go/releases)\r\n- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)\r\n- [Commits](https://github.com/googleapis/google-cloud-go/compare/spanner/v1.41.0...spanner/v1.42.0)\r\n\r\nUpdates `github.com/aws/aws-sdk-go-v2` from 1.27.0 to 1.30.1\r\n- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)\r\n- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.27.0...v1.30.1)\r\n\r\nUpdates `github.com/aws/aws-sdk-go-v2/config` from 1.27.16 to 1.27.23\r\n- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)\r\n- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.27.16...config/v1.27.23)\r\n\r\nUpdates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.54.3 to 1.57.1\r\n- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)\r\n- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.54.3...service/s3/v1.57.1)\r\n\r\nUpdates `github.com/caddyserver/certmagic` from 0.21.2 to 0.21.3\r\n- [Release notes](https://github.com/caddyserver/certmagic/releases)\r\n- [Commits](https://github.com/caddyserver/certmagic/compare/v0.21.2...v0.21.3)\r\n\r\nUpdates `github.com/cloudflare/circl` from 1.3.8 to 1.3.9\r\n- [Release notes](https://github.com/cloudflare/circl/releases)\r\n- [Commits](https://github.com/cloudflare/circl/compare/v1.3.8...v1.3.9)\r\n\r\nUpdates `github.com/docker/docker` from 26.1.3+incompatible to 27.0.3+incompatible\r\n- [Release notes](https://github.com/docker/docker/releases)\r\n- [Commits](https://github.com/docker/docker/compare/v26.1.3...v27.0.3)\r\n\r\nUpdates `github.com/go-chi/chi/v5` from 5.0.12 to 5.1.0\r\n- [Release notes](https://github.com/go-chi/chi/releases)\r\n- [Changelog](https://github.com/go-chi/chi/blob/master/CHANGELOG.md)\r\n- [Commits](https://github.com/go-chi/chi/compare/v5.0.12...v5.1.0)\r\n\r\nUpdates `github.com/gorilla/websocket` from 1.5.1 to 1.5.3\r\n- [Release notes](https://github.com/gorilla/websocket/releases)\r\n- [Commits](https://github.com/gorilla/websocket/compare/v1.5.1...v1.5.3)\r\n\r\nUpdates `github.com/klauspost/compress` from 1.17.8 to 1.17.9\r\n- [Release notes](https://github.com/klauspost/compress/releases)\r\n- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml)\r\n- [Commits](https://github.com/klauspost/compress/compare/v1.17.8...v1.17.9)\r\n\r\nUpdates `github.com/minio/minio-go/v7` from 7.0.70 to 7.0.72\r\n- [Release notes](https://github.com/minio/minio-go/releases)\r\n- [Commits](https://github.com/minio/minio-go/compare/v7.0.70...v7.0.72)\r\n\r\nUpdates `github.com/open-policy-agent/opa` from 0.65.0 to 0.66.0\r\n- [Release notes](https://github.com/open-policy-agent/opa/releases)\r\n- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/open-policy-agent/opa/compare/v0.65.0...v0.66.0)\r\n\r\nUpdates `github.com/prometheus/common` from 0.53.0 to 0.55.0\r\n- [Release notes](https://github.com/prometheus/common/releases)\r\n- [Changelog](https://github.com/prometheus/common/blob/main/RELEASE.md)\r\n- [Commits](https://github.com/prometheus/common/compare/v0.53.0...v0.55.0)\r\n\r\nUpdates `github.com/spf13/viper` from 1.18.2 to 1.19.0\r\n- [Release notes](https://github.com/spf13/viper/releases)\r\n- [Commits](https://github.com/spf13/viper/compare/v1.18.2...v1.19.0)\r\n\r\nUpdates `golang.org/x/crypto` from 0.23.0 to 0.24.0\r\n- [Commits](https://github.com/golang/crypto/compare/v0.23.0...v0.24.0)\r\n\r\nUpdates `golang.org/x/net` from 0.25.0 to 0.26.0\r\n- [Commits](https://github.com/golang/net/compare/v0.25.0...v0.26.0)\r\n\r\nUpdates `golang.org/x/oauth2` from 0.20.0 to 0.21.0\r\n- [Commits](https://github.com/golang/oauth2/compare/v0.20.0...v0.21.0)\r\n\r\nUpdates `golang.org/x/sys` from 0.20.0 to 0.21.0\r\n- [Commits](https://github.com/golang/sys/compare/v0.20.0...v0.21.0)\r\n\r\nUpdates `google.golang.org/api` from 0.178.0 to 0.183.0\r\n- [Release notes](https://github.com/googleapis/google-api-go-client/releases)\r\n- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)\r\n- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.178.0...v0.183.0)\r\n\r\nUpdates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20240515191416-fc5f0ca64291 to 0.0.0-20240528184218-531527333157\r\n- [Commits](https://github.com/googleapis/go-genproto/commits)\r\n\r\nUpdates `google.golang.org/protobuf` from 1.34.1 to 1.34.2\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: cloud.google.com/go/storage\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: github.com/aws/aws-sdk-go-v2\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: github.com/aws/aws-sdk-go-v2/config\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-patch\r\n  dependency-group: go\r\n- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: github.com/caddyserver/certmagic\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-patch\r\n  dependency-group: go\r\n- dependency-name: github.com/cloudflare/circl\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-patch\r\n  dependency-group: go\r\n- dependency-name: github.com/docker/docker\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-major\r\n  dependency-group: go\r\n- dependency-name: github.com/go-chi/chi/v5\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: github.com/gorilla/websocket\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-patch\r\n  dependency-group: go\r\n- dependency-name: github.com/klauspost/compress\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-patch\r\n  dependency-group: go\r\n- dependency-name: github.com/minio/minio-go/v7\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-patch\r\n  dependency-group: go\r\n- dependency-name: github.com/open-policy-agent/opa\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: github.com/prometheus/common\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: github.com/spf13/viper\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: golang.org/x/crypto\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: golang.org/x/net\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: golang.org/x/oauth2\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: golang.org/x/sys\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: google.golang.org/api\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n  dependency-group: go\r\n- dependency-name: google.golang.org/genproto/googleapis/rpc\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-patch\r\n  dependency-group: go\r\n- dependency-name: google.golang.org/protobuf\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-patch\r\n  dependency-group: go\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\n\r\n* fix test\r\n\r\n---------\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\r\nCo-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>",
+          "timestamp": "2024-07-05T13:26:47-06:00",
+          "tree_id": "392fddb98057b8bfd06197315e7301cd678eabc8",
+          "url": "https://github.com/pomerium/pomerium/commit/8f8c66e9fdefd3c41446ef765ee7085987a57e97"
+        },
+        "date": 1720207779400,
+        "tool": "go",
+        "benches": [
+          {
+            "name": "BenchmarkLoggedInUserAccess",
+            "value": 9137658,
+            "unit": "ns/op",
+            "extra": "135 times\n4 procs"
+          },
+          {
+            "name": "BenchmarkLoggedOutUserAccess",
+            "value": 6432001,
+            "unit": "ns/op",
+            "extra": "182 times\n4 procs"
+          }
+        ]
       }
     ]
   }