If people are offline, they just might want to be able to access their account
pages anyway. Let's not hard-code the strictest of settings into the handler.
Signed-off-by: Dan Scott <dscott@laurentian.ca>
return $self->redirect_auth unless $self->editor->requestor;
# Don't cache anything requiring auth for security reasons
- $self->apache->headers_out->add("cache-control" => "no-store, no-cache, must-revalidate");
- $self->apache->headers_out->add("expires" => "-1");
+ $self->apache->headers_out->add("cache-control" => "no-cache, must-revalidate");
return $self->load_email_record if $path =~ m|opac/record/email|;