| Subject: | Cache-Control: no-cache is wrong |
The cache control directive no-cache allows a user agent or proxy to cache the response, albeit requiring them to revalidate with the server before using the cached response. If you want to prohibit caches from keeping a copy, instead use the directive no-store.
Please see RFC 2616 ยง14.9 and http://www.mnot.net/cache_docs/