If you're logged in and then log out, hitting the back button will still show the previous page(s) potentially with private info on them.
Pylons defaults to Cache-Control: no-cache
header, but that isn't always enough and there are a lot more caching directives that can be included in there.
On branch db/8153
Merged.