I am facing a problem while developing web application,
when user get log off from my application i am removing the user object from the session so every new request now forcing user to provide valid user id/password
but if user click browser back button he is getting back to the previous page i.e secured page
i set the header from the server declared meta header in my jsp page then tested but problem was still there.
then in order to enhance the process i implimented SSL and now my applicationis running on secure port but it dosen't make any improvement in to my application
if any one have resolved this problem earlier pleaes share his experience with me so that i can move ahead