auth: Set Cache-Control: no-store when we don't want to cache

[ipfire.org.git] / src / web / auth.py

diff --git a/src/web/auth.py b/src/web/auth.py
index 5594a6dd0f39ea253f2ca866fcf17ddf50cd0438..d9bb703ec8aff8d2fb3574003e66a9b9f27eb81c 100644 (file)
--- a/src/web/auth.py
+++ b/src/web/auth.py
@@ -11,7 +11,7 @@ class CacheMixin(object):
                if self.current_user:
                        self.add_header("Cache-Control", "private")
 
-               self.add_header("Vary", "Cookie")
+               self.add_header("Cache-Control", "no-store")
 
 
 class AuthenticationMixin(CacheMixin):