Updated HTTP 1.1 header and session destroy

app/controllers/application_controller.rb

@@ -279,10 +279,8 @@ class ApplicationController < ActionController::Base
   end
 
   def default_cache_headers
-    if current_user
     headers['Pragma'] = 'no-cache' # HTTP 1.0 compatibility
   end
-  end
 
   def stream_csv_headers(csv_filename)
     no_cache_headers

app/controllers/sessions_controller.rb

@@ -84,7 +84,7 @@ class SessionsController < Devise::SessionsController
   end
 
   def destroy
-    headers['Clear-Site-Data'] = '"cache"'
+    headers['Clear-Site-Data'] = '"*"'
 
     Gitlab::AppLogger.info("User Logout: username=#{current_user.username} ip=#{request.remote_ip}")
     super