disabling the browsers ui is definitely impossible via any method besides some illegal method that m$ might implement via .NET.
I looked into what you are trying to do a while back and thought one of my banking sites was able to pull it off with frames....however i just tried it with them and it does bring my logged in profile back so now i'm not sure what i remember.
in short, i think its impossible. remove page caching and shorten the session timeout is your only chance i think.