From mboxrd@z Thu Jan  1 00:00:00 1970
From: Jason at zx2c4.com (Jason A. Donenfeld)
Date: Thu, 16 Jan 2014 01:40:33 +0100
Subject: authentication support: work has begun!
In-Reply-To: <CAHmME9pcgyHDX7e4=MC=yaSZ1o7HcmRYAN-CVp=b8ic0AkoTfg@mail.gmail.com>
References: <CAHmME9pLfxyuEPYa2c92Gq4+O4aPkP+_pfUv-N1RMUPpPvVUjw@mail.gmail.com>
 <14648906.FqII7cU9cN@al>
 <CAHmME9qUPhGUJu3DYp=cqfEqd-A7RyTVxHrz2tyqG64MsZi_7A@mail.gmail.com>
 <4500221.0uF48Q1BnU@al>
 <CAHmME9pcgyHDX7e4=MC=yaSZ1o7HcmRYAN-CVp=b8ic0AkoTfg@mail.gmail.com>
Message-ID: <CAHmME9pEKo8ynuKKD7VpT37oyn-XVzcvEUjhPCeCHREws_d9-w@mail.gmail.com>

On Wed, Jan 15, 2014 at 7:29 PM, Jason A. Donenfeld <Jason at zx2c4.com> wrote:
> On Wed, Jan 15, 2014 at 7:17 PM, Peter Wu <lekensteyn at gmail.com> wrote:
>> The current login page is cachable, you should add "Cache-Control: private" to
>> prevent that.
>
> Excellent idea.

I've added no-cache, no-store to the login page and the redirection.

I've also merged this to master. Please test, and send any fixes you find!