This was reported by a partner: "So there is kind of a pretty big security bug, the logged in pages are being cached by the browser, so on a public OPAC machine even after the user has logged out you can click the back button to see all the account pages they looked at. You can't actually do anything because then it asks for login, but that's still a really major problem." I'm not sure how or if we can fix this issue. I tried the solution here: http://stackoverflow.com/questions/1341089/using-meta-tags-to-turn-off-caching-in-all-browsers But it did not help at all in FireFox or Chrome.
*** This bug has been marked as a duplicate of bug 5371 ***