title: how to invalidate session in jsf 2.0 if browser get closed without being invalidating the current session.
body: <p>if i close my browser without invalidating the session then i don't want it to access my application without being log-in again.</p>
  
  <p>and don't want my user to get assess to the restricted user pages by using back button.</p>
  
  <p>how can i do this in JSF 2.0?  </p>