caddyauth: isolate provider responses to prevent cross-provider clobbering (#7904)