Added extra header to ensure cache revalidation after login/logout