title: Django - User re-entering session by clicking browser back button after logging out
body: <p>I am creating a web application on Django. When a logged-in user clicks 'Logout', the logout page correctly appears. However, when clicking the back button in the browser, the user can once more re-enter the session. To fix this, I followed this post : <a href="https://stackoverflow.com/questions/6923027/disable-browser-back-button-after-logout">Disable browser &#39;Back&#39; button after logout?</a> , and used cache_control. However, the user can still re-enter the 'closed' session by clicking the back button. Here's the relevant code:</p>
  
  <p>views.py:</p>
  
  <pre><code>from django.views.decorators.cache import cache_control
  
  @cache_control(no_cache=True, must_revalidate=True, no_store=True)
  def logout_view(request):
  
  #c={}
  #c.update(csrf(request))
  logout(request)
  #request.session.flush()
  #request.user = AnonymousUser
  #Redirect to logout page
  return render_to_response('gamestore/logout.html')
  
  @cache_control(no_cache=True, must_revalidate=True, no_store=True)
  def login_view(request):
  
      #do something
  </code></pre>
  
  <p>settings.py:</p>
  
  <pre><code># Build paths inside the project like this: os.path.join(BASE_DIR, ...)
  import os
  BASE_DIR = os.path.dirname(os.path.dirname(__file__))
  SETTINGS_PATH = os.path.realpath(os.path.dirname(__file__))
  DATABASE_PATH = os.path.join(BASE_DIR, 'db.sqlite3')
  
  TEMPLATE_DIRS = (
  # Put strings here, like "/home/html/django_templates" or "C:/www/django/templates".
  # Always use forward slashes, even on Windows.
  # Don't forget to use absolute paths, not relative paths.
  #"/home/mukhera3/Desktop/wsdProject/gamestore/templates", #TODO use absolute path here
  
  )
  
  # Quick-start development settings - unsuitable for production
  # See https://docs.djangoproject.com/en/1.7/howto/deployment/checklist/
  
  # SECURITY WARNING: keep the secret key used in production secret!
  SECRET_KEY = '[the-secret-key-needs-to-stay-secret]'
  
  # SECURITY WARNING: don't run with debug turned on in production!
  DEBUG = True
  
  TEMPLATE_DEBUG = True
  
  ALLOWED_HOSTS = []
  
  
  # Application definition
  
  INSTALLED_APPS = (
  'django.contrib.admin',
  'django.contrib.auth',
  'django.contrib.contenttypes',
  'django.contrib.sessions',
  'django.contrib.messages',
  'django.contrib.staticfiles',
  'gamestore',
  )
  
  MIDDLEWARE_CLASSES = (
  'django.contrib.sessions.middleware.SessionMiddleware',
  'django.middleware.common.CommonMiddleware',
  'django.middleware.csrf.CsrfViewMiddleware',
  'django.contrib.auth.middleware.AuthenticationMiddleware',
  'django.contrib.auth.middleware.SessionAuthenticationMiddleware',
  'django.contrib.messages.middleware.MessageMiddleware',
  'django.middleware.clickjacking.XFrameOptionsMiddleware',
  )
  
  ROOT_URLCONF = 'wsdProject.urls'
  
  WSGI_APPLICATION = 'wsdProject.wsgi.application'
  
  
  # Database
  # https://docs.djangoproject.com/en/1.7/ref/settings/#databases
  
  DATABASES = {
  'default': {
  'ENGINE': 'django.db.backends.sqlite3',
  'NAME': DATABASE_PATH,
  }
  }
  
  # Internationalization
  # https://docs.djangoproject.com/en/1.7/topics/i18n/
  
  LANGUAGE_CODE = 'en-us'
  
  TIME_ZONE = 'UTC'
  
  USE_I18N = True
  
  USE_L10N = True
  
  USE_TZ = True
  
  
  # Static files (CSS, JavaScript, Images)
  # https://docs.djangoproject.com/en/1.7/howto/static-files/
  
  STATIC_URL = '/static/'
  </code></pre>
  
  <p>I am new to Django and Python coding, so may have made some basic errors. Please help</p>