enable refresh and back/forward without logging out or clearing data. direct URL access is still problematic