I disabled the back button with disabling the page's cache. But when I refresh the previous page I get a postback and sessionid has the same value, so I still logged on. Is anyone could tell how to make the user logged off every time he hits the back page button?