Onetime tokens to prevent replay attacks

Avoid replay incidents. These can either be malicious (attacker solves manually once, reuses many times) or accidental (user hits back button and reposts).