Mojo allows the browser to cache pages. This is bad when a user is viewing a sensitive page protected by roles because when the user logs out the sensitive page is still viewable by hitting the "Back" button.
I am able to disable the browser cache by placing the following in the Default.aspx page load:
Response.Cache.SetExpires(new DateTime(1995, 5, 6, 12, 0, 0, DateTimeKind.Utc));
This seems to work well in Firefox and IE. However, this only applies to certain pages that are tied to the Default.aspx in some way that I do not understand. The /Secure/UserProfile.aspx page, for example, is still cached with the above code.
Any thoughts on how to disable cache for the entire MojoPortal?