[imp] "Logout" does not effectively end session.

[Christopher Crowley]

 Here's the situation that I am seeing.

 The server's configuration is set to use IMP to authenticate the session.

 If I go to https://server/horde and log on to this page ( as opposed to
 browsing to https://server/horde/imp ) I can select "Logout" then use the
 back button, and read mail, open my inbox, open the calendar...

 This problem doesn't seem to occur if I start at https://server/horde/imp .
 So, is there a way to force users to start at imp?

 I have tried this with both shm and sql sessions management.

Are others seeing this behavior? Do you suspect there is a misconfiguration
on my installation?  Please make suggestions for tests to troubleshoot this
problem.

Thanks in advance.

Christopher Crowley
TIS Network Services
Tulane University
ccrowley@tulane.edu
504.314.2535
PGP Key ID: 0x7CF18FDB