Updated HTTP 1.1 header and session destroy

app/controllers/application_controller.rb

@@ -279,9 +279,7 @@ class ApplicationController < ActionController::Base
   end
 
   def default_cache_headers
-    if current_user
-      headers['Pragma'] = 'no-cache' # HTTP 1.0 compatibility
-    end
+    headers['Pragma'] = 'no-cache' # HTTP 1.0 compatibility
   end
 
   def stream_csv_headers(csv_filename)

app/controllers/sessions_controller.rb

@@ -84,7 +84,7 @@ class SessionsController < Devise::SessionsController
   end
 
   def destroy
-    headers['Clear-Site-Data'] = '"cache"'
+    headers['Clear-Site-Data'] = '"*"'
 
     Gitlab::AppLogger.info("User Logout: username=#{current_user.username} ip=#{request.remote_ip}")
     super