feat: add no-cache headers to login redirects

gas/views.py

@@ -6,6 +6,7 @@ from django.core.exceptions import ImproperlyConfigured
 from django.db import router
 from django.http import HttpResponse, HttpResponseRedirect, HttpResponseBadRequest
 from django.urls import reverse
+from django.utils.cache import add_never_cache_headers
 from django.utils.html import escape, escapejs
 from django.utils.text import capfirst
 from django.utils.translation import gettext_lazy as _
@@ -97,7 +98,10 @@ class GASMixin:
 
     def dispatch(self, *args, **kwargs):
         if self.check_user_forbidden():
-            return HttpResponseRedirect(reverse('gas:login') + '?next={}'.format(self.request.path))
+            path = self.request.path
+            response = HttpResponseRedirect(reverse('gas:login') + f'?next={path}')
+            add_never_cache_headers(response)
+            return response
         return super().dispatch(*args, **kwargs)
 
     def form_valid(self, form):