I was testing the booking application and I encountered this problem:

After logging in and going forward a couple of steps, searching a hotel and start the booking process, if I click the logout button in the middle I get redirected to login page which is fine. But without closing the browser if I hit the back button, seam traverses the previous URL's.

I was expecting that since I have logged out, the back button would restrict me to see those pages. Is there any way to achieve this?

In our application we put breakpoints in various places but hitting the back button does not execute any code. We have our entire application pages secured by pages.xml and all the backing beans secured by @LoggedIn annotation. But it still does not work.

Any insight in this back button issue is appreciated.

Thanks