That's how it's supposed to work, but in the web application I'm building, it will just randomly disable itself. Theoretically, if what you're saying is true, and a user clicked on a link to take them to the log-in page of my web app, that would be the first page. It will SOMETIMES let them go back until that log-in page, other times, it will disable itself at the 2nd page, or some other page. It's very strange.