We have an auto logout feature in our application, when the timer is reached, the user is disconnected and redirected to the login page.
If, for example, the user leaves the application open and come back the following day and tries to login, he will receive an error message like “you may have pressed the back button…”.
I suppose there is a lifetime for the state of the login page.