ExpiresByType text/html “access plus 600 seconds”
Silly me!
Thanks for your quick reply
So after the user logs in and then navigates to another page and then clicks on a link that has been prefetched from the page before, it comes from disk cache without the logged in user content