Fix: don't cache pages that display a user access token or an app secret.