Even after logging from my Welcome.jsp page, I could reach the page with the back button. I too added SetHeaders for cache clean.
<%@ page language="java" contentType="text/html; charset=ISO-8859-1"
pageEncoding="ISO-8859-1"%>
<!DOCTYPE html>
<html>
<head>
<meta charset="ISO-8859-1">
<title>Insert title here</title>
</head>
<body>
<%
response.setHeader("Cache-Control", "no-cache, no-store, must-revalidate"); // HTTP 1.1.
response.setHeader("Pragma", "no-cache"); // HTTP 1.0.
response.setHeader("Expires", "0"); // Proxies.
if(session.getAttribute("uname").equals(null)){
response.sendRedirect("Login.jsp");
}
//if(session.getAttribute("uname").equals("bala")&&session.getAttribute("pass").equals("9566"))
%>
<br>
Welcome dead engineer called" ${uname}"!!!
<br>
<a href="Videos.jsp"> Videos here></a>
<form action="Logout">
<input type="submit" value="Logout">
</form>
</body>
</html>