title: Prevent LoggedOut users from viewing user-only-pages from browser history
body: <p>In my ASP.NET MVC (5) application, session is not being used to identify whether a user is logged in or not. Rather, I'm using some encrypted values in query strings or hidden fields. </p>
  
  <p>But just now I realized that any person can visit those user-only-pages from browser history.</p>
  
  <p>Any idea to solve this problem?</p>
  
  <p>UPDATE: Most of the MVC Actions send partial html/json through ajax.</p>
  
  <p>UPDATE:</p>
  
  <pre><code>    [OutputCache(NoStore = true, Duration = 0, VaryByParam = "None")]
      public ActionResult Index()
      {
          return View(); // I want it from viewing from browser cache.
      }
  </code></pre>