The browser does not hit the server when you press back - so, no, it is not possible.
But if you tell the browser not to cache anything, this works.
I used this together with Struts, where I had to change the RequestProcessor.
There are some examples on how to solve this out in the net. But I don´t really like them, as you have to use jsp:scriptlet for that.
But I see, that it´s not possible at the moment. But as I already said: I think this would be something, that should be added.
I put this as a JS include in all my pages.
It prevents back. This could be used only for the logout page in your case. Maybe an AJAX poller that would automatically redirect the page if there is not a valid login?