Safari is ignoring Cache-Control Headers

If you are developing a website application, and you want the page to be requested every time the user hits a back/forward button, the common way to achieve this is to use: Cache-Control: no store, no cache, must revalidate, etc. However, Safari is ignoring this directive, so users can get back into the application without re-authenticating. Any subsequent requests are unauthorized, but still this is a bug found only in Safari. I tested with Chrome and Firefox.