Have you tried sending the username as a cookie instead? (AFAIK) browsers will not send the headers that you provide back to the server (which means you wont get the username in your case), but cookies will go back. And my guess is that you should be able to configure now Output Caching and Vary it by the Cookie Header.